CVE-2014-6170: IBM Integration Bus

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.

Affected products

• IBM Integration Bus: version 9.0 only; version 9.0.0.1 only; version 9.0.0.2 only; version 9.0.0.3 only
• IBM WebSphere Message Broker: version 7.0. only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.0.0.5 only; …

Published 2015-02-02. Last modified 2026-06-17.