Integration bus

This hub aggregates every CVE we track for Integration bus, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Integration bus.

• CVE-2026-3602IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection4.7Jun 30, 2026
• CVE-2025-36014IBM Integration Bus for z/OS code injection8.2Jul 7, 2025
• CVE-2024-22356IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure4.9Mar 26, 2024
• CVE-2024-27265IBM Integration Bus for z/OS cross-site request forgery4.5Mar 14, 2024
• CVE-2024-22332IBM Integration Bus for z/OS denial of service6.5Feb 9, 2024
• CVE-2023-45176IBM App Connect Enterprise and IBM Integration Bus denial of service6.2Oct 14, 2023
• CVE-2018-1801IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9...5.3Feb 4, 2019
• CVE-2017-1418IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit...4.0Nov 26, 2018
• CVE-2017-1693IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: ...5.6Jan 19, 2018
• CVE-2017-1694IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.8.1Dec 20, 2017
• CVE-2017-1126IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Fo...5.3Oct 3, 2017
• CVE-2017-1144IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033.2.5Jul 5, 2017
• CVE-2017-1207IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.5.5Jul 5, 2017
• CVE-2016-9706IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A rem...9.1Feb 15, 2017
• CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could ex...6.1Feb 15, 2017