Ibm Mq For Hpe Nonstop vulnerabilities
13 known vulnerabilities affecting ibm/mq_for_hpe_nonstop.
Total CVEs
13
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH8MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2026-10858P3CRITICALCVSS 9.9≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-10858 [CRITICAL] CWE-122 CVE-2026-10858: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.
nvd
CVE-2026-11381P3HIGHCVSS 8.8≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-11381 [HIGH] CWE-122 CVE-2026-11381: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures.
nvd
CVE-2026-11727P3HIGHCVSS 8.1≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-11727 [HIGH] CWE-122 CVE-2026-11727: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when requesting AMS policy data.
nvd
CVE-2026-11716P3HIGHCVSS 7.5≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-11716 [HIGH] CWE-122 CVE-2026-11716: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data.
nvd
CVE-2026-10744P3HIGHCVSS 7.5≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-10744 [HIGH] CWE-122 CVE-2026-10744: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.
nvd
CVE-2026-11726P3HIGHCVSS 8.1≥ 8.1.0, ≤ 8.1.0.402026-09-18
CVE-2026-11726 [HIGH] CWE-125 CVE-2026-11726: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensit
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values.
nvd
CVE-2021-38950P3HIGHCVSS 7.8v8.0.4v8.1.02021-12-14
CVE-2021-38950 [HIGH] CVE-2021-38950: IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBind
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.
nvd
CVE-2022-40237P4HIGHCVSS 7.5v8.1.02023-02-27
CVE-2022-40237 [HIGH] CWE-20 CVE-2022-40237: IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the
IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.
nvd
CVE-2020-4352P4HIGHCVSS 7.0v8.0.4v8.1.02020-05-29
CVE-2020-4352 [HIGH] CVE-2020-4352: IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427.
nvd
CVE-2020-4466P4MEDIUMCVSS 6.5v8.0.4v8.1.02020-07-20
CVE-2020-4466 [MEDIUM] CVE-2020-4466: IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a den
IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within the Queue processing function. IBM X-Force ID: 181563.
nvd
CVE-2024-51470P4MEDIUMCVSS 6.5≥ 8.1.0, < 8.1.0.26≥ 8.1.0, ≤ 8.1.0.252024-12-18
CVE-2024-51470 [MEDIUM] CWE-754 CVE-2024-51470: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
nvd
CVE-2020-4376P4MEDIUMCVSS 6.5v8.0.4v8.1.02020-07-01
CVE-2020-4376 [MEDIUM] CVE-2020-4376: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a
IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081.
nvd
CVE-2022-22325P4MEDIUMCVSS 5.5v8.1.02022-05-13
CVE-2022-22325 [MEDIUM] CVE-2022-22325: IBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under certain
IBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853.
nvd