Ibm Mq vulnerabilities

87 known vulnerabilities affecting ibm/mq.

Total CVEs

87

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH26MEDIUM56LOW3

Vulnerabilities

Page 2 of 5

CVE-2024-25015HIGHCVSS 7.5≥ 9.2.0.0, < 9.2.0.25≥ 9.3.0, < 9.3.5+2 more2024-05-01

CVE-2024-25015 [HIGH] CWE-406 CVE-2024-25015: IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial o IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.

CVE-2023-45177MEDIUMCVSS 5.3≥ 9.0.0.0, < 9.0.0.21≥ 9.1.0.0, < 9.1.0.18+4 more2024-03-20

CVE-2023-45177 [MEDIUM] CWE-20 CVE-2023-45177: IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within the MQ clustering logic. IBM X-Force ID: 268066.

CVE-2024-25016HIGHCVSS 7.5≥ 9.0.0.0, < 9.0.0.23≥ 9.1.0.0, < 9.1.0.20+3 more2024-03-03

CVE-2024-25016 [HIGH] CWE-20 CVE-2024-25016: IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated a IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

CVE-2023-28513HIGHCVSS 7.5v9.0.0.0v9.1.0.0+3 more2023-07-19

CVE-2023-28513 [MEDIUM] CWE-20 CVE-2023-28513: IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.

CVE-2023-28514MEDIUMCVSS 5.5v8.0.0.0v9.0.0.0+3 more2023-05-19

CVE-2023-28514 [MEDIUM] CWE-209 CVE-2023-28514: IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

CVE-2023-28950MEDIUMCVSS 5.5v8.0.0.0v9.0.0.0+4 more2023-05-19

CVE-2023-28950 [MEDIUM] CVE-2023-28950: IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if th IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

CVE-2023-26285HIGHCVSS 7.5v9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS2023-05-05

CVE-2023-26285 [MEDIUM] CWE-119 CVE-2023-26285: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of servi IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.

CVE-2022-43919MEDIUMCVSS 6.5v9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS2023-05-05

CVE-2022-43919 [MEDIUM] CWE-20 CVE-2022-43919: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.

CVE-2023-22874MEDIUMCVSS 5.5v9.2 CD, 9.3 CD, and 9.3 LTS2023-05-05

CVE-2023-22874 [MEDIUM] CWE-400 CVE-2023-22874: IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when process IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.

CVE-2022-43902HIGHCVSS 7.5v9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS2023-03-10

CVE-2022-43902 [MEDIUM] CVE-2022-43902: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by sp IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.

CVE-2022-42436LOWCVSS 3.3v8.0.0.0v9.0.0.0+5 more2023-02-12

CVE-2022-42436 [MEDIUM] CVE-2022-42436: IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain se IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.

CVE-2022-31772MEDIUMCVSS 6.5v8.0.0.0v9.0.0.0+4 more2022-11-11

CVE-2022-31772 [MEDIUM] CWE-20 CVE-2022-31772: IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authoriz IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.

CVE-2022-22489CRITICALCVSS 9.1v8.0.0.0v9.0.0.0+8 more2022-08-19

CVE-2022-22489 [CRITICAL] CWE-611 CVE-2022-22489: IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injec IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.

CVE-2022-22321MEDIUMCVSS 5.5≥ 9.2.0, < 9.2.0.5≥ 9.2.0, < 9.2.52022-03-01

CVE-2022-22321 [MEDIUM] CWE-326 CVE-2022-22321: IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368.

CVE-2021-38986MEDIUMCVSS 5.4≥ 9.2.0, < 9.2.0.4≥ 9.2.0, < 9.2.52022-03-01

CVE-2021-38986 [MEDIUM] CWE-613 CVE-2021-38986: IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an au IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.

CVE-2021-39034HIGHCVSS 7.5≥ 9.1.0.0, ≤ 9.1.0.9v9.1.02022-02-17

CVE-2021-39034 [HIGH] CVE-2021-39034: IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel pro IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964.

CVE-2021-38875MEDIUMCVSS 6.5v8.0.0.0v9.0.0.0+5 more2021-11-23

CVE-2021-38875 [MEDIUM] CVE-2021-38875: IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attac IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398.

CVE-2021-38949MEDIUMCVSS 5.5≥ 8.0.0.0, < 8.0.0.14≥ 9.0.0.0, < 9.0.0.9+6 more2021-11-16

CVE-2021-38949 [MEDIUM] CWE-312 CVE-2021-38949: IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.

CVE-2020-4931MEDIUMCVSS 6.5v9.1.0v9.1.0.0+1 more2021-02-24

CVE-2020-4931 [MEDIUM] CVE-2020-4931: IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denia IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747.

CVE-2020-4682CRITICALCVSS 9.8v8.0.0.0v8.0.0.1+39 more2021-01-28

CVE-2020-4682 [CRITICAL] CWE-502 CVE-2020-4682: IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary co IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.

← Previous2 / 5Next →