Skip to content

Known vulnerabilities in IBM Integration Bus

Is your version affected?

CVE Summary Score Published
CVE-2025-36014 IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with… 8.2 High Jul 7, 2025
CVE-2024-22356 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1… 4.9 Medium Mar 26, 2024
CVE-2023-45176 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through… 6.2 Medium Oct 14, 2023
CVE-2018-1801 IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus… 5.3 Medium Feb 4, 2019
CVE-2017-1418 IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and… 4.0 Medium Nov 26, 2018
CVE-2017-1693 IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users… Not rated Jan 19, 2018
CVE-2017-1694 IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker… Not rated Dec 20, 2017
CVE-2017-1126 IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive… Not rated Oct 3, 2017
CVE-2017-1144 IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from… Not rated Jul 5, 2017
CVE-2017-1207 IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user Not rated Jul 5, 2017

Other IBM products