Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Websphere Message Broker
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-5953 1 Ibm 1 Websphere Message Broker 2023-12-10 4.3 MEDIUM N/A
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
CVE-2013-5372 1 Ibm 1 Websphere Message Broker 2023-12-10 4.3 MEDIUM N/A
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
CVE-2009-0503 1 Ibm 1 Websphere Message Broker 2023-12-10 2.1 LOW N/A
IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs.