CVE-2015-2018: IBM Integration Bus

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected products

• IBM Integration Bus: version 9.0 only; version 10.0 only
• IBM WebSphere Message Broker: version 7.0. only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.0.0.5 only; …

Published 2015-08-23. Last modified 2026-06-17.