Ibm Mq vulnerabilities
109 known vulnerabilities affecting ibm/mq.
Total CVEs
109
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH44MEDIUM58LOW3
Vulnerabilities
Page 6 of 6
CVE-2017-1283P4MEDIUMCVSS 4.3v8.0v9.0+12 more2017-11-27
CVE-2017-1283 [MEDIUM] CWE-772 CVE-2017-1283: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ a
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144.
nvd
CVE-2019-4049P4MEDIUMCVSS 5.5≥ 9.1.0, ≤ 9.1.1≥ 9.1.0.0, ≤ 9.1.0.2+4 more2019-08-20
CVE-2019-4049 [MEDIUM] CWE-400 CVE-2019-4049: IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user
IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398.
nvd
CVE-2023-22874P4MEDIUMCVSS 5.5v9.2 CD, 9.3 CD, and 9.3 LTS2023-05-05
CVE-2023-22874 [MEDIUM] CWE-400 CVE-2023-22874: IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when process
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.
nvd
CVE-2024-40680P4MEDIUMCVSS 5.5v9.3 CD, 9.4 LTS, 9.4 CD2024-09-07
CVE-2024-40680 [MEDIUM] CWE-789 CVE-2024-40680: IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper m
IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.
nvd
CVE-2024-54175P4MEDIUMCVSS 5.5v9.3.0v9.4.0+1 more2025-02-28
CVE-2024-54175 [MEDIUM] CWE-754 CVE-2024-54175: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow a local user to cause a denial of service
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD
could allow a local user to cause a denial of service due to an improper check for unusual or exceptional conditions.
nvd
CVE-2019-4039P4MEDIUMCVSS 5.5v9.0.0.1v8.0.0.1+19 more2019-05-23
CVE-2019-4039 [MEDIUM] CVE-2019-4039: IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to c
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163.
nvd
CVE-2017-1341P4LOWCVSS 3.7v9.0v9.0.1+10 more2017-12-07
CVE-2017-1341 [LOW] CVE-2017-1341: IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to acces
IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456.
nvd
CVE-2017-1699P4LOWCVSS 3.3v8.0v9.0+10 more2018-01-04
CVE-2017-1699 [LOW] CWE-732 CVE-2017-1699: IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates
IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391.
nvd
CVE-2022-42436P4LOWCVSS 3.3v8.0.0.0v9.0.0.0+5 more2023-02-12
CVE-2022-42436 [LOW] CVE-2022-42436: IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain se
IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.
nvd
← Previous6 / 6