CVSS: 5.3EPSS: 0%CPEs: 18EXPL: 0CVE-2015-7399
https://notcve.org/view.php?id=CVE-2015-7399
IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors. IBM WebSphere Message Broker 7 en versiones anteriores a 7.0.0.8 y 8 en versiones anteriores a 8.0.0.6 y IBM Integration Bus 9 en versiones anteriores a 9.0.0.3 y 10 en versiones anteriores a 10.0.0.0 permiten a atacantes remotos obtener información sensible acerca del servidor HTTP a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031 http://www-01.ibm.com/support/docview.wss?uid=swg21969672 http://www.securitytracker.com/id/1034999 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 3.5EPSS: 0%CPEs: 17EXPL: 0CVE-2015-2018
https://notcve.org/view.php?id=CVE-2015-2018
IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Vulnerabilidad en IBM Integration Bus 9 y 10 en versiones anteriores a 10.0.0.1 y WebSphere Message Broker 7 en versiones anteriores a 7.0.0.8 y 8 en versiones anteriores a 8.0.0.7 no asegura que sea seleccionado el perfil de seguridad correcto, lo que permite a usuarios remotos autenticados obtener información sensible a través de vectores no espicificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IT07773 http://www-01.ibm.com/support/docview.wss?uid=swg21961734 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2015-0118
https://notcve.org/view.php?id=CVE-2015-0118
IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easier for remote attackers to obtain sensitive information by sniffing the network during a connection to an Integration Bus node. IBM WebSphere Message Broker Toolkit 7 anterior a 7007 IF2 y 8 anterior a 8005 IF1 y Integration Toolkit 9 anterior a 9003 IF1 están distribuidos con ficheros JAR de clientes de MQ que solo soportan cifrados TLS débiles, lo que podría facilitar a atacantes remotos obtener información sensible mediante la captura de trafico de la red durante una conexión a un nodo Integration Bus. • http://www-01.ibm.com/support/docview.wss?uid=swg1IT05725 http://www-01.ibm.com/support/docview.wss?uid=swg21957998 • CWE-310: Cryptographic Issues •
CVSS: 5.0EPSS: 0%CPEs: 18EXPL: 0CVE-2014-6170
https://notcve.org/view.php?id=CVE-2014-6170
The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault. El nodo HTTPInput en IBM WebSphere Message Broker 7.0 anterior a 7.0.0.8 y 8.0 anterior a 8.0.0.6 y IBM Integration Bus 9.0 anterior a 9.0.0.4 permite a atacantes remotos obtener información sensible mediante la provocación de un fallo SOAP. • http://www-01.ibm.com/support/docview.wss?uid=swg1IT01929 http://www-01.ibm.com/support/docview.wss?uid=swg21690725 https://exchange.xforce.ibmcloud.com/vulnerabilities/98309 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 3%CPEs: 23EXPL: 0CVE-2013-5372 – JDK: XML4J xml entity expansion excessive memory use (XML)
https://notcve.org/view.php?id=CVE-2013-5372
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities. El parseador XML4J en IBM WebSphere Message Broker 6.1 antes 6.1.0.12, 7.0 antes 7.0.0.7 y 8.0.0.4 y 8.0 antes de IBM Integration Bus 9.0 antes 9.0.0.1 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un documento XML manipulado que provoca la expansión de muchas entidades. • http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html http://rhn.redhat.com/errata/RHSA-2013-1507.html http://rhn.redhat.com/errata/RHSA-2013-1508.html http://rhn.redhat.com/errata/RHSA-2013-1509.html http://rhn.redhat.com/errata/RHSA-2013-1793.html http://secunia.com/advisories/56338 http://www-01.ibm.com/support/docview.wss?uid=swg1IC96473 http://www-01.ibm.com/support/docview.wss?uid=swg21653087 http://www-01.ibm.com/support/docview.wss?uid • CWE-399: Resource Management Errors •