MA
Product
MQ Appliance
51
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 15Medium 34Low 0
Watch
Add MQ Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0975 | 8.8 | Feb 28 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters Affected: 9.3.0 through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10 |
| CVE-2024-40681 | 8.8 | Sep 7 | IBM MQ security bypass Affected: 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD |
| CVE-2020-4938 | 8.8 | Jul 12 | IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that… Affected: 9.1 before 9.2.2; 9.1.0.0 before 9.1.0.8; 9.2.0.0 before 9.2.0.2 |
| CVE-2017-1318 | 8.8 | Jul 18 | IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +3 more |
| CVE-2023-46176 | 7.8 | Nov 3 | IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys Affected: 9.3.0.0 |
| CVE-2019-4620 | 7.8 | Jan 28 | IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4 |
| CVE-2019-4294 | 7.8 | Aug 20 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could… Affected: 8.0.0.0 through 8.0.0.12; 9.1.0.0 through 9.1.0.2; 9.1.1 through 9.1.2 |
| CVE-2025-3631 | 7.5 | Jul 11 | An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it Affected: 9.3.2 through 9.3.5.2; 9.4.0.0 before 9.4.0.12; 9.4.0.0 before 9.4.3; 9.4.1.0 before 9.4.3.0 |
| CVE-2024-25048 | 7.5 | Apr 27 | IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking Affected: 9.3.0.0 before 9.3.0.17; 9.3.0.0 before 9.3.5 |
| CVE-2024-25016 | 7.5 | Mar 3 | IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic Affected: 9.3.0.0 through 9.3.5.0 |
| CVE-2023-46177 | 7.5 | Dec 18 | IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system Affected: 9.3.0.0; 9.3.0.0 |
| CVE-2023-28513 | 7.5 | Jul 19 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial… Affected: 9.2.0.0; 9.2.0.0; 9.3.0.0; 9.3.0.0 |
| CVE-2022-43902 | 7.5 | Mar 10 | IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages Affected: 9.2.0.0 before 9.2.0.8; 9.2.0.0 before 9.2.5; 9.2.5; 9.2.5; 9.2.5; 9.2.5; +3 more |
| CVE-2020-4375 | 7.5 | Jul 28 | IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a… Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0 |
| CVE-2019-4055 | 7.5 | Apr 19 | IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function Affected: 8.0.0.0 through 8.0.0.10; 9.1.0 through 9.1.1; 9.1.0.0 through 9.1.0.1 |
Showing 15