Login Request a demo
MA
Product
MQ Appliance
by IBM · last CVE Sep 18, 2026
51
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities51In the news0Timeline
Severity mix
Critical 2High 15Medium 34Low 0
Severity
All severities51Critical2High15Medium34Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-38967
6.7
0%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code
Affected: 9.2.0.0; 9.2.0.0
CVE-2025-23225
6.5
0%
Feb 28
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue
Affected: through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10
CVE-2024-51470
6.5
1%
Dec 18
IBM MQ denial of service
Affected: 9.3 LTS, 9.3 CD, 9.4 LTS
CVE-2022-43919
6.5
1%
May 5
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service
Affected: 9.2.0.0 before 9.2.0.10; 9.2.0.0 before 9.2.5.7; 9.3.0.0 before 9.3.0.5; 9.3.0.0 before 9.3.2
CVE-2022-40230
6.5
0%
Nov 3
"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system
Affected: 9.2.0.0; 9.2.0.0; 9.3.0.0; 9.3.0.0
CVE-2022-22356
6.5
1%
Apr 5
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts
Affected: 9.2.0.0; 9.2.0.0
CVE-2022-22316
6.5
1%
Mar 23
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks
Affected: 9.2.0.0 before 9.2.0.5; 9.2.0.0 before 9.2.5
CVE-2021-29843
6.5
1%
Nov 8
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties
Affected: 9.1.0.0 before 9.1.0.9; 9.1.0.0 before 9.2.3; 9.2.0.0 before 9.2.0.3
CVE-2020-4869
6.5
2%
Jan 11
IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow
Affected: 9.2.0.0; 9.2.0.0
CVE-2020-4592
6.5
1%
Nov 18
IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages
Affected: 9.1.0.0; 9.1.0.0
CVE-2020-4465
6.5
2%
Jul 28
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code
Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2020-4267
6.5
1%
Apr 24
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak
Affected: 9.1.0 before 9.1.5
CVE-2019-4656
6.5
1%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and…
Affected: 8.0.0.0 before 8.0.0.14
CVE-2019-4614
6.5
2%
Jan 28
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4560
6.5
1%
Dec 16
IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages
Affected: 8.0.0.0 before 8.0.0.13; 9.0.0.0 before 9.0.0.8; 9.1.0.0 before 9.1.0.4; 9.1.1 before 9.1.4
CVE-2025-14456
5.9
0%
Mar 3
IBM MQ Appliance uses weaker than expected cryptographic algorithms
Affected: 9.4 CD through 9.4.4.0 to 9.4.4.1
CVE-2023-26285
5.9
1%
May 5
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data
Affected: 9.2.0.0 before 9.2.0.11; 9.2.0.0 before 9.2.5.7; 9.3.0.0 before 9.3.0.5; 9.3.0.0 before 9.3.2.1
CVE-2019-4568
5.9
1%
Jan 28
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel
Affected: 8.0.0.0 before 8.0.0.14
CVE-2024-40680
5.5
0%
Sep 7
IBM MQ denial of service
Affected: 9.3 CD, 9.4 LTS, 9.4 CD
CVE-2023-22874
5.5
0%
May 5
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files
Affected: 9.2.0.0 before 9.3.2; 9.3.0.0 before 9.3.0.5
CVE-2021-39000
5.5
1%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics
Affected: 9.2.0.0; 9.2.0.0
CVE-2021-38999
5.5
0%
Nov 30
IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace
Affected: 9.2.0.0; 9.2.0.0
CVE-2021-38958
5.5
0%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue
Affected: 9.2.0.0; 9.2.0.0
CVE-2019-4731
5.5
0%
Jul 28
IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace
Affected: 9.1.4
CVE-2019-4719
5.5
0%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras…
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4619
5.5
0%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2018-1652
5.5
0%
Dec 11
IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2…
Affected: 8.0.0.0 through 8.0.0.8; 9.0.1 through 9.0.5
CVE-2018-1429
5.4
1%
Mar 23
IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting
Affected: 9.0.1; 9.0.2; 9.0.3; 9.0.4
CVE-2024-51471
5.3
0%
Dec 19
IBM MQ Appliance denial of service
Affected: 9.3 LTS, 9.3 CD, 9.4 LTS
CVE-2022-22355
5.3
1%
Apr 5
IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance
Affected: 9.2.0.0; 9.2.0.0
CVE-2024-54173
4.7
0%
Feb 28
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled
Affected: before 9.4.2; 9.3.0.0 before 9.3.0.27; 9.4.0.0 before 9.4.0.10
CVE-2020-4498
4.4
0%
Jul 27
IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files
Affected: 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2020-4319
4.3
1%
Jul 28
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to…
Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2019-4655
4.3
1%
Dec 30
IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections…
Affected: 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
Showing 34