Ibm

Multi-enterprise Integration Gateway

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2023-22595

  • EPSS 0.11%
  • Published 31.07.2023 02:15:09
  • Last modified 21.11.2024 07:45:01

IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona...

6.5

CVE-2023-24971

  • EPSS 0.09%
  • Published 31.07.2023 02:15:09
  • Last modified 21.11.2024 07:48:51

IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976.

5.4

CVE-2016-5892

  • EPSS 0.17%
  • Published 05.10.2016 10:59:15
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated users to inject arbitrary web script or HTML via un...

7.5

CVE-2016-0341

  • EPSS 0.27%
  • Published 15.05.2016 01:59:00
  • Last modified 12.04.2025 10:46:40

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.

4.3

CVE-2015-7445

  • EPSS 0.18%
  • Published 01.01.2016 05:59:07
  • Last modified 12.04.2025 10:46:40

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.