Product by IBM
IBM Integration Bus
28 known vulnerabilities in IBM Integration Bus (IBM), 1 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability In CISA KEValso in 12 other products | 9.8 | |
| Critical | CVE-2016-9706 | IBM Integration Bus: XML External Entity (XXE) | 9.1 | |
| High | CVE-2025-67030 | codehaus-plexus plexus-utils: Path Traversal | 8.8 | |
| Medium | CVE-2018-1801 | IBM Integration Bus: XML External Entity (XXE) | 5.3 | |
| Medium | CVE-2015-7399 | IBM WebSphere Message Broker: Information Disclosure | 5.3 | |
| Medium | CVE-2025-8885 | Possible DOS in processing specially formed ASN.1 Object Identifiers | — | |
| Medium | CVE-2016-2961 | IBM Integration Bus: security vulnerability | 5.3 | |
| Medium | CVE-2025-8916 | Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer | — | |
| High | CVE-2017-1694 | IBM Integration Bus: security vulnerability | 8.1 | |
| Medium | CVE-2017-1126 | IBM Integration Bus: Information Disclosure | 5.3 | |
| Medium | CVE-2016-8918 | IBM Integration Bus: security vulnerability | 5.9 | |
| Medium | CVE-2017-1693 | IBM Integration Bus: security vulnerability | 5.6 | |
| Medium | CVE-2024-22332 | IBM Integration Bus for z/OS denial of service | 6.5 | |
| Medium | CVE-2016-9010 | IBM Integration Bus: security vulnerability | 6.1 | |
| High | CVE-2025-36014 | IBM Integration Bus for z/OS code injection | 8.2 | |
| Medium | CVE-2026-3602 | IBM App Connect Enterprise: External Control of File Name or Path | 4.7 | |
| Medium | CVE-2024-22356 | IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure | 4.9 | |
| Not rated | CVE-2014-6170 | IBM WebSphere Message Broker: Information Disclosure | — | |
| Medium | CVE-2023-45176 | IBM App Connect Enterprise and IBM Integration Bus denial of service | 6.2 | |
| Not rated | CVE-2014-4819 | IBM WebSphere Message Broker: Information Disclosure | — | |
| Not rated | CVE-2015-0118 | IBM WebSphere Message Broker: Information Disclosure | — | |
| Medium | CVE-2017-1207 | IBM Integration Bus: security vulnerability | 5.5 | |
| Medium | CVE-2024-27265 | IBM Integration Bus for z/OS cross-site request forgery | 4.5 | |
| Not rated | CVE-2015-2018 | IBM WebSphere Message Broker: Information Disclosure | — | |
| Medium | CVE-2017-1418 | IBM Integration Bus: security vulnerability | 4.0 |