CVE-2016-0341

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-15 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.

Affected products

IBM B2B Advanced Communications: 1.0, 1.0.0.1, 1.0.0.2, 1.0.0.3
IBM Multi-Enterprise Integration Gateway: 1.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835
http://www-01.ibm.com/support/docview.wss?uid=swg21981462
http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835
http://www-01.ibm.com/support/docview.wss?uid=swg21981462

Get alerted when CVE-2016-0341 or the next vulnerability affects your stack