Integration Bus (Ibm) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 47 known versions, newest CVE from 2026-06-30. Vendor: Ibm.

CVEs of Integration Bus

CVE-2026-3602 - CVSS 5.5 (medium), 2026-06-30: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable…
CVE-2025-36014 - CVSS 8.2 (high), 2025-07-07: IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory.
CVE-2024-22356 - CVSS 4.9 (medium), 2024-03-26: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially…
CVE-2024-27265 - CVSS 6.5 (medium), 2024-03-14: IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
CVE-2024-22332 - CVSS 6.5 (medium), 2024-02-09: The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion. IBM X-Force ID: 279972.
CVE-2023-45176 - CVSS 6.2 (medium), 2023-10-14: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of…
CVE-2018-1801 - CVSS 5.3 (medium), 2019-02-04: IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere…
CVE-2017-1418 - CVSS 5.5 (medium), 2018-11-26: IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on…
CVE-2017-1693 - CVSS 5.6 (medium), 2018-01-19: IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before…
CVE-2017-1694 - CVSS 8.1 (high), 2017-12-20: IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM…
CVE-2017-1126 - CVSS 5.3 (medium), 2017-10-04: IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that…
CVE-2017-1144 - CVSS 2.5 (low), 2017-07-05: IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033.
CVE-2017-1207 - CVSS 5.5 (medium), 2017-07-05: IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.
CVE-2016-9706 - CVSS 9.1 (critical), 2017-02-15: IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection…
CVE-2016-9010 - CVSS 6.1 (medium), 2017-02-15: IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
CVE-2016-8918 - CVSS 5.9 (medium), 2017-02-01: IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials.
CVE-2016-0394 - CVSS 3.3 (low), 2017-02-01: IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files.
CVE-2016-2961 - CVSS 5.3 (medium), 2016-07-02: The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to…
CVE-2015-7399 - CVSS 5.3 (medium), 2016-01-11: IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to…
CVE-2015-5011 - CVSS 3.2 (low), 2015-10-26: IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check authorization for MQSISTARTMSGFLOW and MQSISTOPMSGFLOW…
CVE-2015-2018 - CVSS 3.5 (low), 2015-08-23: IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security…
CVE-2015-0118 - CVSS 4.3 (medium), 2015-06-28: IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR…
CVE-2014-6170 - CVSS 5 (medium), 2015-02-02: The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote…
CVE-2014-4819 - CVSS 4 (medium), 2014-09-18: The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to…