IBM Integration Bus

Name: IBM Integration Bus
Brand: IBM

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high15medium3low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	≤ 10.1.0.3
CVE-2024-9143US	—	5.84% (93rd)	—	13.0.3.0	2024-10-16	< 13.0.3.0
CVE-2018-1801US	medium5.3	2.45% (84th)	—	no fix	2019-02-04	4 versions
CVE-2020-28241US	medium6.5	2.16% (82nd)	—	no fix	2020-11-06	≤ 10.1.0.3
CVE-2017-1126US	medium5.3	1.22% (69th)	—	no fix	2017-10-04	2 versions
CVE-2024-20926US	—	1.03% (64th)	—	no fix	2024-01-16	≤ 10.1.0.3
CVE-2017-1693US	medium5.6	0.94% (61st)	—	no fix	2018-01-19	2 versions
CVE-2024-20921US	—OT elevated	0.86% (58th)	—	no fix	2024-02-17	≤ 10.1.0.3
CVE-2024-25016US	high7.5	0.85% (58th)	—	no fix	2024-03-03	≤ 10.1.0.3
CVE-2017-1694US	high8.1OT elevated	0.81% (57th)	—	no fix	2017-12-20	2 versions
CVE-2024-20919US	—	0.80% (56th)	—	no fix	2024-02-17	≤ 10.1.0.3
CVE-2024-20932US	—	0.78% (56th)	—	no fix	2024-01-16	≤ 10.1.0.3
CVE-2023-49568US	high7.5	0.70% (53rd)	—	no fix	2024-01-12	≤ 10.1.0.3
CVE-2024-22332US	medium6.5	0.61% (49th)	—	no fix	2024-02-09	≤ 10.1.0.2
CVE-2024-20923US	—	0.60% (49th)	—	no fix	2024-02-17	≤ 10.1.0.3
CVE-2024-22356US	medium4.9	0.54% (45th)	—	no fix	2024-03-26	2 versions
CVE-2024-20955US	—	0.52% (44th)	—	no fix	2024-01-16	≤ 10.1.0.3
CVE-2024-20945US	—	0.41% (36th)	—	no fix	2024-02-17	≤ 10.1.0.3
CVE-2023-5676US	medium5.9	0.41% (35th)	—	no fix	2023-11-15	≤ 10.1.0.3
CVE-2002-1713US	medium5.5OT elevated	0.38% (31st)	—	no fix	2002-12-31	≤ 10.1.0.3
CVE-2001-1550US	low2.1OT elevated	0.37% (30th)	—	no fix	2001-12-31	≤ 10.1.0.3
CVE-2002-1711US	low2.1OT elevated	0.36% (30th)	—	no fix	2002-12-31	≤ 10.1.0.3
CVE-2005-1941US	high7.8OT elevated	0.34% (27th)	—	no fix	2005-06-08	≤ 10.1.0.3
CVE-2017-1418US	medium5.5	0.33% (26th)	—	no fix	2018-11-26	4 versions
CVE-2017-1207US	medium5.5	0.32% (25th)	—	no fix	2017-07-05	2 versions
CVE-2024-20922US	—	0.30% (23rd)	—	no fix	2024-01-16	≤ 10.1.0.3
CVE-2017-1144US	low2.5	0.28% (21st)	—	no fix	2017-07-05	2 versions
CVE-2026-3602US	medium5.5	0.27% (19th)	—	10.1.0.7 PH71150	2026-06-30	< 10.1.0.7 PH71150
CVE-2024-27255US	high7.5OT elevated	0.26% (18th)	—	no fix	2024-03-03	≤ 10.1.0.3
CVE-2025-36014US	medium6.7	0.25% (16th)	—	10.1.0.5-IIB-ZOS-LAPH65769	2025-07-07	2 versions
CVE-2024-27265US	medium6.5	0.24% (15th)	—	no fix	2024-03-14	≤ for z/OS <=10.1.0.3
CVE-2023-45176US	medium5.5	0.18% (8th)	—	no fix	2023-10-14	≤ 10.1 ≤10.1.0.1
CVE-2023-47745US	medium5.5OT elevated	0.12% (2nd)	—	no fix	2024-03-03	≤ 10.1.0.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-276Incorrect Default Permissions4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)24 CVEs
EUEU Vulnerability Database (ENISA)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan