What’s Vulnerable › Vulnerabilities

CVE-2015-7399

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-11 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors.

Affected products

• IBM Integration Bus for z/OS: 9.0, 9.0.0.1, 9.0.0.2, 10.0
• IBM WebSphere Message Broker: 7.0., 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 (+8)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031
• http://www-01.ibm.com/support/docview.wss?uid=swg21969672
• http://www.securitytracker.com/id/1034999
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031
• http://www-01.ibm.com/support/docview.wss?uid=swg21969672
• http://www.securitytracker.com/id/1034999

Get alerted when CVE-2015-7399 or the next vulnerability affects your stack