WM
Product
WebSphere MQ
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 34Low 6
Watch
Add WebSphere MQ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1145 | 8.6 | Mar 20 | IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource… Affected: 8.0.0.6 |
| CVE-2017-1337 | 8.1 | Jul 10 | IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text Affected: 9.0.1; 9.0.2 |
| CVE-2019-4078 | 7.8 | May 23 | IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on… Affected: 8.0.0.0 through 8.0.0.11; 9.0.0.0 through 9.0.0.5; 9.1.0.0 through 9.1.0.1; 9.1.1 |
| CVE-2018-1998 | 7.8 | Mar 11 | IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges Affected: 8.0.0.0 through 8.0.0.10; 9.0.0.0 through 9.0.0.5; 9.1.0.0 through 9.1.0.1 |
| CVE-2018-1792 | 7.8 | Nov 13 | IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root… Affected: 8.0.0.0 through 8.0.0.10; 9.0.0.0 through 9.0.0.5; 9.0.1 through 9.0.5; 9.1.0.0 |
| CVE-2017-1612 | 7.8 | Jan 9 | IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user Affected: 7.5; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +34 more |
| CVE-2012-2201 | 7.5 | Sep 29 | IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids Affected: 7.1 |
| CVE-2020-4310 | 7.5 | Jun 16 | IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic Affected: 7.1; 7.5 |
| CVE-2018-1974 | 7.5 | Mar 11 | IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels Affected: 8.0.0.0 through 8.0.0.10; 9.0.0.0 through 9.0.0.5; 9.1.0.0 through 9.1.1 |
| CVE-2018-1551 | 7.5 | Aug 6 | IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user… Affected: 8.0.0.2; 8.0.0.4; 8.0.0.3; 8.0.0.6; 8.0.0.5; 8.0.0.7; +5 more |
| CVE-2018-1388 | 7.5 | Feb 7 | GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding Affected: 7.0.1.0; 7.0.1.1; 7.0.1.2; 7.0.1.3; 7.0.1.4; 7.0.1.5; +9 more |
| CVE-2016-0260 | 7.5 | Jun 29 | Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by triggering many errors Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4 |
| CVE-2017-1760 | 7.1 | Dec 11 | IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information Affected: 7.5; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +15 more |
Showing 13