VendorsIBMmulti-enterprise_integration_gatewayall versions
Vulnerabilities

IBM Multi-Enterprise Integration Gateway

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2016-0341
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.
Published 2016-05-15 · Modified
7.5EPSS 0.014
CVE-2023-24971
IBM B2B Advanced Communication denial of service
Published 2023-07-31 · Modified
7.5EPSS 0.008
CVE-2016-5892
Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published 2016-10-05 · Modified
5.4EPSS 0.006
CVE-2023-22595
IBM B2B Advanced Communication cross-site scripting
Published 2023-07-31 · Modified
5.4EPSS 0.003
CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
Published 2016-01-01 · Modified
4.3EPSS 0.010