CVE-2014-0921: IBM Messagesight

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets connection upgrade.

Affected products

• IBM Messagesight
• IBM Messagesight Jms Client: version 1.0.0.0 only; version 1.0.0.1 only; version 1.1.0.0 only

Published 2014-04-15. Last modified 2026-06-17.