Ibm Supplied Mq Advanced Container Images vulnerabilities
24 known vulnerabilities affecting ibm/supplied_mq_advanced_container_images.
Total CVEs
24
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH6MEDIUM15LOW1
Vulnerabilities
Page 2 of 2
CVE-2026-12727P4MEDIUMCVSS 4.3v9.4.1.0-r1v9.4.1.0-r2+80 more2026-10-19
CVE-2026-12727 [MEDIUM] CWE-193 CVE-2026-12727: IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by
IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
nvd
CVE-2026-12669P4MEDIUMCVSS 4.3v9.4.1.0-r1v9.4.1.0-r2+80 more2026-10-19
CVE-2026-12669 [MEDIUM] CWE-125 CVE-2026-12669: IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf
IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.
nvd
CVE-2025-12755P4MEDIUMCVSS 4.0≥ SC2: 9.4.0.6, ≤ r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r22026-02-17
CVE-2025-12755 [MEDIUM] CWE-117 CVE-2025-12755: IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images
IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected SC2, CD, and LTS 9.3.x–9.4.x releases) contain a vulnerability where log messages are not properly neutralized before being written to log files. This flaw could allow an unauthorized user to inject malicious data into MQ log entries,
nvd
CVE-2026-12660P4LOWCVSS 2.7v9.4.1.0-r1v9.4.1.0-r2+80 more2026-10-19
CVE-2026-12660 [LOW] CWE-22 CVE-2026-12660: IBM MQ Web Console could allow an authenticated administrator to write files outside the intended di
IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.
nvd
← Previous2 / 2