WM
Product
WebSphere MQ
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 34Low 6
Watch
Add WebSphere MQ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1341 | 3.7 | Dec 7 | IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; 8.0.0.6; +6 more |
| CVE-2017-1699 | 3.3 | Jan 4 | IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +6 more |
| CVE-2016-9009 | 3.1 | Feb 24 | IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering Affected: 8.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; +1 more |
| CVE-2016-0379 | 3.1 | Sep 26 | IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by… Affected: 7.5; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +6 more |
| CVE-2016-0259 | 2.5 | Jun 26 | runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4 |
| CVE-2015-7473 | 2.5 | Jun 26 | runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4 |
Showing 6