cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2023-24971,https://securityvulnerability.io/vulnerability/CVE-2023-24971,IBM B2B Advanced Communication denial of service,"The vulnerability allows an attacker to exploit a deserialization flaw in IBM B2B Advanced Communications and IBM Multi-Enterprise Integration Gateway. By sending untrusted serialized Java objects, an attacker could cause a denial of service, potentially disrupting service availability. To mitigate this risk, users should ensure that their systems are updated to the latest versions and apply recommended security patches.",IBM,"B2b Advanced Communications,Multi-enterprise Integration Gateway",7.5,HIGH,0.0006799999973736703,false,,false,false,false,,,false,false,,2023-07-31T02:15:00.000Z,0
CVE-2023-22595,https://securityvulnerability.io/vulnerability/CVE-2023-22595,IBM B2B Advanced Communication cross-site scripting,IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  244076.,IBM,"B2b Advanced Communications,Multi-enterprise Integration Gateway",5.4,MEDIUM,0.0004900000058114529,false,,false,false,false,,,false,false,,2023-07-31T02:15:00.000Z,0
CVE-2016-0341,https://securityvulnerability.io/vulnerability/CVE-2016-0341,,"IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.",IBM,B2b Advanced Communications,7.5,HIGH,0.002529999939724803,false,,false,false,false,,,false,false,,2016-05-15T01:00:00.000Z,0
CVE-2015-7445,https://securityvulnerability.io/vulnerability/CVE-2015-7445,,"IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.",IBM,B2b Advanced Communications,4.3,MEDIUM,0.0010900000343099236,false,,false,false,false,,,false,false,,2016-01-01T02:00:00.000Z,0
CVE-2015-4973,https://securityvulnerability.io/vulnerability/CVE-2015-4973,,Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.,IBM,B2b Advanced Communications,,,0.0013200000394135714,false,,false,false,false,,,false,false,,2015-10-06T01:59:00.000Z,0
CVE-2015-5022,https://securityvulnerability.io/vulnerability/CVE-2015-5022,,"IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information by leveraging a trading-partner relationship and reading response fields.",IBM,B2b Advanced Communications,,,0.001769999973475933,false,,false,false,false,,,false,false,,2015-10-06T01:59:00.000Z,0