Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

IBM MQ Appliance

35 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-107479.4 LTS – 9.4.0.0 to 9.4.0.25 ; 9.4 CD – 9.4.1.0 to 9.4.5.2 ; 10.0.0.0 – 10.0.0.1 onlyIBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processingCRITICAL 10.00.9 %
CVE-2025-144569.4 CD – 9.4.4.0 to 9.4.4.1IBM MQ Appliance uses weaker than expected cryptographic algorithmsMEDIUM 5.90.2 %
CVE-2025-36319.3.2.0 CD – 9.3.5.2 CD ; 9.4.0.0 LTS – 9.4.0.11 LTS ; 9.4.1.0 CD – 9.4.2.1 CDIBM MQ denial of serviceHIGH 7.50.4 %
CVE-2024-514719.3 LTS, 9.3 CD, 9.4 LTSIBM MQ Appliance denial of serviceMEDIUM 5.30.3 %
CVE-2024-514709.3 LTS, 9.3 CD, 9.4 LTSIBM MQ denial of serviceMEDIUM 6.50.7 %
CVE-2024-250489.3 LTS, 9.3 CDIBM MQ code executionHIGH 7.50.9 %
CVE-2023-461779.3 LTS, 9.3 CDIBM MQ Appliance information disclosureHIGH 7.51.3 %
CVE-2023-461769.3 CDIBM MQ privilege escalationHIGH 7.80.2 %
CVE-2023-285139.2 LTS, 9.3 LTS, 9.2 CD, 9.2 LTSIBM MQ denial of serviceHIGH 7.51.0 %
CVE-2022-223569.2 LTS ; 9.2 CDIBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and iMEDIUM 6.50.9 %
CVE-2022-223559.2 LTS ; 9.2 CDIBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attMEDIUM 5.31.1 %
CVE-2022-223169.2 LTS ; 9.2 CDIBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configuMEDIUM 6.51.0 %
CVE-2022-223219.2 LTS ; 9.2 CDIBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID:MEDIUM 5.50.2 %
CVE-2021-389869.2 LTS ; 9.2 CDIBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another MEDIUM 5.60.5 %
CVE-2021-390009.2.0.0 ; 9.2.1 ; 9.2.0.1 ; …IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnMEDIUM 5.90.7 %
CVE-2021-389999.2.0.0 ; 9.2.1 ; 9.2.0.1 ; …IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace.MEDIUM 5.50.2 %
CVE-2021-389679.2.0.0 ; 9.2.1 ; 9.2.0.1 ; …IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441.HIGH 8.20.3 %
CVE-2021-389589.2.0.0 ; 9.2.1 ; 9.2.0.1 ; …IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042MEDIUM 5.50.2 %
CVE-2021-298439.1.LTS ; 9.1.CD ; 9.2.LTS ; …IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBMMEDIUM 6.50.9 %
CVE-2020-49389.1 ; 9.2IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorizedHIGH 8.80.4 %
CVE-2020-49319.1.0.0 ; 9.1.0.1 ; 9.1.1 ; …IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing MEDIUM 6.51.2 %
CVE-2020-48699.2.0.0 ; 9.2.1IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a speciaMEDIUM 6.51.8 %
CVE-2020-48709.2.0.0IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 19HIGH 7.51.7 %
CVE-2020-45929.1.LTS ; 9.1.CDIBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to aMEDIUM 6.50.8 %
CVE-2020-44658.0 ; 9.1.LTS ; 9.1.CDIBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an errMEDIUM 6.51.9 %
CVE-2020-43758.0 ; 9.1.LTS ; 9.1.CDIBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memoHIGH 7.51.5 %
CVE-2020-43198.0 ; 9.1.LTS ; 9.1.CDIBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated userMEDIUM 4.30.7 %
CVE-2019-47319.1.4.CDIBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IMEDIUM 5.50.3 %
CVE-2020-44989.1.0.0 ; 9.1.0.1 ; 9.1.1 ; …IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data withiMEDIUM 4.40.3 %
CVE-2020-42678.0.0.3 ; 8.0.0.4 ; 8.0.0.5 ; …IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-ForMEDIUM 6.51.3 %
CVE-2019-46208.0.0.3 ; 8.0.0.4 ; 8.0.0.5 ; …IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment vHIGH 8.40.4 %
CVE-2019-42948.0.0.3 ; 8.0.0.4 ; 8.0.0.5 ; …IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 throughHIGH 8.40.9 %
CVE-2018-16529.0.1 ; 9.0.5 ; 8.0.0.0 ; …IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 throughMEDIUM 6.20.4 %
CVE-2018-14299.0.1 ; 9.0.2 ; 9.0.3 ; …IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JaMEDIUM 5.41.0 %
CVE-2017-13188.0 ; 8.0.0.3 ; 8.0.0.4 ; …IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by comHIGH 8.83.1 %