← Back

Websphere Enterprise Service Bus

websphere_enterprise_service_bus

Vendor: Ibm • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1885
1Ibm
4Business Automation Workflow
Business Process ManagerBusiness Process Manager Enterprise Service Bus+1 more
Nov 21, 2024
Apr 8, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVE-2018-1384
1Ibm
4Business Process Manager
Business Process Manager Enterprise Service BusWebsphere Enterprise Service Bus+1 more
Nov 21, 2024
Mar 30, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.Show less
CVE-2014-6176
1Ibm
3Business Process Manager
Websphere Enterprise Service BusWebsphere Process Server
May 6, 2026
Dec 16, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA mod...Show more
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which makes it easier for remote attackers to hijack sessions or obtain sensitive information by leveraging the use of a weak cipher.Show less