Ibm Mq Appliance vulnerabilities
52 known vulnerabilities affecting ibm/mq_appliance.
Total CVEs
52
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH16MEDIUM35
Vulnerabilities
Page 2 of 3
CVE-2020-4465P4MEDIUMCVSS 6.5≥ 8.0, < 8.0.0.15≥ 9.1.0.0, < 9.1.0.6+4 more2020-07-28
CVE-2020-4465 [MEDIUM] CWE-120 CVE-2020-4465: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buf
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562.
nvd
CVE-2022-40230P4MEDIUMCVSS 6.5v9.2.0.0v9.3.0.02022-11-03
CVE-2022-40230 [MEDIUM] CWE-613 CVE-2022-40230: "IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout whic
"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."
nvd
CVE-2025-14456P4MEDIUMCVSS 5.9≥ 9.4.4.0, < 9.4.5.0≥ 9.4 CD, ≤ 9.4.4.0 to 9.4.4.12026-03-03
CVE-2025-14456 [MEDIUM] CWE-327 CVE-2025-14456: IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
nvd
CVE-2019-4614P4MEDIUMCVSS 6.5≥ 8.0.0.0, < 8.0.0.14≥ 9.1.0, < 9.1.4+1 more2020-01-28
CVE-2019-4614 [MEDIUM] CVE-2019-4614: IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSE
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639.
nvd
CVE-2022-22316P4MEDIUMCVSS 6.5≥ 9.2.0.0, < 9.2.0.5≥ 9.2.0.0, < 9.2.5+2 more2022-03-23
CVE-2022-22316 [MEDIUM] CVE-2022-22316: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a deni
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.
nvd
CVE-2024-51470P4MEDIUMCVSS 6.5≥ 9.1.0.0, < 9.1.0.26≥ 9.2.0.0, < 9.2.0.30+3 more2024-12-18
CVE-2024-51470 [MEDIUM] CWE-754 CVE-2024-51470: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
nvd
CVE-2019-4656P4MEDIUMCVSS 6.5≥ 8.0.0.0, < 8.0.0.142020-03-16
CVE-2019-4656 [MEDIUM] CVE-2019-4656: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force ID: 170967.
nvd
CVE-2019-4560P4MEDIUMCVSS 6.5≥ 8.0.0.0, < 8.0.0.13≥ 9.0.0.0, < 9.0.0.8+2 more2019-12-16
CVE-2019-4560 [MEDIUM] CVE-2019-4560: IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service a
IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357.
nvd
CVE-2022-43919P4MEDIUMCVSS 6.5≥ 9.2.0.0, < 9.2.0.10≥ 9.2.0.0, < 9.2.5.7+2 more2023-05-05
CVE-2022-43919 [MEDIUM] CWE-20 CVE-2022-43919: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.
nvd
CVE-2020-4267P4MEDIUMCVSS 6.5≥ 9.1.0, < 9.1.5v8.0.0.3+21 more2020-04-24
CVE-2020-4267 [MEDIUM] CWE-401 CVE-2020-4267: IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.
nvd
CVE-2020-4931P4MEDIUMCVSS 6.5v9.1.0.0v9.1.0.1+12 more2021-02-24
CVE-2020-4931 [MEDIUM] CVE-2020-4931: IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denia
IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747.
nvd
CVE-2021-29843P4MEDIUMCVSS 6.5≥ 9.1.0.0, < 9.1.0.9≥ 9.1.0.0, < 9.2.3+5 more2021-11-08
CVE-2021-29843 [MEDIUM] CVE-2021-29843: IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203.
nvd
CVE-2021-38967P4MEDIUMCVSS 6.7v9.2.0.0v9.2.1+5 more2021-11-30
CVE-2021-38967 [MEDIUM] CWE-94 CVE-2021-38967: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malici
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441.
nvd
CVE-2025-23225P4MEDIUMCVSS 6.5≤ 9.4.2≥ 9.3.0.0, ≤ 9.3.0.27+1 more2025-02-28
CVE-2025-23225 [MEDIUM] CWE-230 CVE-2025-23225: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of s
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.
nvd
CVE-2021-38986P4MEDIUMCVSS 5.4v9.2 LTSv9.2 CD2022-03-01
CVE-2021-38986 [MEDIUM] CWE-613 CVE-2021-38986: IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an au
IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.
nvd
CVE-2019-4568P4MEDIUMCVSS 5.9≥ 8.0.0.0, < 8.0.0.142020-01-28
CVE-2019-4568 [MEDIUM] CVE-2019-4568: IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629.
nvd
CVE-2018-1429P4MEDIUMCVSS 5.4v9.0.1v9.0.2+2 more2018-03-23
CVE-2018-1429 [MEDIUM] CWE-79 CVE-2018-1429: IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerab
IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139077.
nvd
CVE-2021-39000P4MEDIUMCVSS 5.5v9.2.0.0v9.2.1+5 more2021-11-30
CVE-2021-39000 [MEDIUM] CWE-200 CVE-2021-39000: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215.
nvd
CVE-2019-4619P4MEDIUMCVSS 5.5≥ 8.0.0.0, < 8.0.0.14≥ 9.1.0, < 9.1.4+1 more2020-03-16
CVE-2019-4619 [MEDIUM] CWE-209 CVE-2019-4619: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 168862.
nvd
CVE-2019-4719P4MEDIUMCVSS 5.5≥ 8.0.0.0, < 8.0.0.14≥ 9.1.0, < 9.1.4+1 more2020-03-16
CVE-2019-4719 [MEDIUM] CVE-2019-4719: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data.
nvd