IBM WebSphere Enterprise Service Bus vulnerabilities

3 CVEs affecting IBM WebSphere Enterprise Service Bus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1885, published 2019-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6176, published 2014-12-16. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL…
CVE-2018-1885, published 2019-04-08. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVE-2018-1384, published 2018-03-30. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…