Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

23 records in Websphere Message Broker · all components

TI-2016-07877 CVE-2016-9706 · GHSA-47c8-72rj-qg9x

XML external entity injection in IBM Integration Bus

Priority MEDIUM 43

IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0176 Published 2017-02-15 No fix listed CWE-611
TI-2018-01590 CVE-2018-1801 · GHSA-6978-8w7h-mg7h

XML external entity injection in IBM Integration Bus

Priority LOW 29

IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0245 Published 2019-02-04 No fix listed CWE-611
TI-2017-00920 CVE-2017-1126 · GHSA-xxpp-86hx-cjfg

Information disclosure in IBM Integration Bus

Priority LOW 27

IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01224 Published 2017-10-03 No fix listed CWE-200
TI-2016-02472 CVE-2016-2961 · GHSA-g883-wc2w-9q7m

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and…

Priority LOW 27

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malf…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01472 Published 2016-07-02 No fix listed CWE-200
TI-2016-05222 CVE-2016-6080 · GHSA-crm6-vr74-2fvq

Information disclosure in IBM WebSphere Message Broker

Priority LOW 26

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01034 Published 2017-02-01 No fix listed CWE-200
TI-2017-00984 CVE-2017-1207 · GHSA-c4pv-cxp6-v96j

Insufficiently protected credentials in IBM Integration Bus

Priority LOW 25

IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00321 Published 2017-07-05 No fix listed CWE-522
TI-2015-00109 CVE-2015-0118 · GHSA-5mrw-gf6v-xxgp

IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and…

Priority LOW 22

IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01066 Published 2015-06-28 No fix listed CWE-310
TI-2014-03959 CVE-2014-4819 · GHSA-pfh5-6wgp-2frw

The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM…

Priority LOW 21

The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01094 Published 2014-09-18 No fix listed CWE-200
TI-2015-01814 CVE-2015-2018 · GHSA-pc29-jph7-fgwg

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before…

Priority LOW 18

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obta…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00869 Published 2015-08-23 No fix listed CWE-200
TI-2015-04208 CVE-2015-5011 · GHSA-r7x3-5rwc-88x4

IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not…

Priority LOW 16

IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check authorization for MQSISTARTMSGFLOW and MQSISTOPMSGFLOW commands, which allows local users to bypass intended access restrict…

CVSS 2.0LOW 3.2 Local Low privileges Interaction — EPSS 0.00334 Published 2015-10-26 No fix listed CWE-77
TI-2017-00934 CVE-2017-1144 · GHSA-c7x4-rwg9-3236

Untrusted search path in IBM Integration Bus

Priority LOW 13

IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting.

CVSS 3.0LOW 2.5 Local Low privileges No interaction EPSS 0.00283 Published 2017-07-05 No fix listed CWE-426
Open these records in search →