IBM Multi-Enterprise Integration Gateway vulnerabilities

5 CVEs affecting IBM Multi-Enterprise Integration Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24971, published 2023-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0341, published 2016-05-15. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive…
CVE-2015-7445, published 2016-01-01. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive…
CVE-2023-24971, published 2023-07-31. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java…
CVE-2016-5892, published 2016-10-05. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated…
CVE-2023-22595, published 2023-07-31. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…