VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 2, 2015· Updated May 6, 2026

CVE-2014-6170

CVE-2014-6170

Description

The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.

Affected products

18
  • IBM/Integration Bus4 versions
    cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*
  • IBM/Websphere Message Broker14 versions
    cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:7.0.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.