IBM MQ
106 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-14511 | 9.4.5.0 – 9.4.5.1 | IBM MQ Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-11725 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-11378 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to remote code execution | HIGH 8.8 | 0.6 % | ||
| CVE-2026-11375 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to remote code execution | HIGH 8.8 | 0.6 % | ||
| CVE-2026-10853 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to remote code execution | HIGH 8.8 | 0.5 % | ||
| CVE-2026-10751 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Java messaging is vulnerable to remote code execution | HIGH 7.5 | 0.5 % | ||
| CVE-2026-10575 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to remote code execution | HIGH 8.8 | 0.5 % | ||
| CVE-2026-10030 | 9.3.0.0 – 9.3.0.41 LTS ; 9.3.0.0 – 9.3.5.1 CD ; 9.4.0.0 – 9.4.0.25 LTS ; … | IBM MQ Console is vulnerable to privilege escalation | HIGH 7.1 | 0.3 % | ||
| CVE-2026-10027 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to unauthenticated remote code execution | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-11728 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ .NET client is vulnerable to remote code execution | HIGH 8.1 | 0.4 % | ||
| CVE-2026-11729 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Java messaging is vulnerable to remote code execution | HIGH 8.5 | 0.5 % | ||
| CVE-2026-12150 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ queue manager is vulnerable to denial of service | HIGH 7.0 | 0.2 % | ||
| CVE-2026-12351 | 9.3.0.0 – 9.3.0.41 LTS ; 9.3.0.0 – 9.3.5.1 CD ; 9.4.0.0 – 9.4.0.25 LTS ; … | IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-12354 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection | HIGH 7.5 | 0.5 % | ||
| CVE-2026-12355 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution | HIGH 8.1 | 0.6 % | ||
| CVE-2026-12666 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Java messaging is vulnerable to XML external entity injection | HIGH 8.1 | 0.5 % | ||
| CVE-2026-12667 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ .NET client is vulnerable to XML external entity injection | HIGH 7.1 | 0.3 % | ||
| CVE-2026-12728 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Java messaging is vulnerable to remote code execution | HIGH 8.8 | 0.7 % | ||
| CVE-2026-13265 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection | MEDIUM 6.8 | 0.4 % | ||
| CVE-2026-13275 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Managed File Transfer is vulnerable to XML external entity injection | HIGH 7.1 | 0.3 % | ||
| CVE-2026-13285 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Managed File Transfer is vulnerable to XML external entity injection | HIGH 7.1 | 0.5 % | ||
| CVE-2026-13293 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Java messaging is vulnerable to remote code execution | HIGH 8.8 | 0.8 % | ||
| CVE-2026-13287 | 9.1.0.0 – 9.1.0.37 LTS ; 9.2.0.0 – 9.2.0.43 LTS ; 9.3.0.0 – 9.3.0.41 LTS ; … | IBM MQ Managed File Transfer is vulnerable to XML external entity injection | HIGH 7.1 | 0.5 % | ||
| CVE-2026-1713 | 9.1.0.0 – 9.1.0.33 LTS ; 9.2.0.0 – 9.2.0.40 LTS ; 9.3.0.0 – 9.3.0.36 LTS ; … | IBM MQ is affected by an authority vulnerablility | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-36128 | 9.1 ; 9.2 ; 9.3 ; … | IBM MQ denial of service | HIGH 7.5 | 0.5 % | ||
| CVE-2025-36100 | 9.1.0.0 – 9.1.0.29 ; 9.2.0.0 – 9.2.0.36 ; 9.3.0.0 – 9.3.0.30 ; … | IBM MQ information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-3631 | 9.3.2.0 CD – 9.3.5.1 CD ; 9.4.0.0 – 9.4.2.1 CD ; 9.4.0.0 LTS – 9.4.0.11 LTS | IBM MQ denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2025-0985 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ information disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-54175 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ denial of service | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-23225 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-54173 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ information disclosure | MEDIUM 4.7 | 0.1 % | ||
| CVE-2025-0975 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ code execution | HIGH 8.8 | 0.7 % | ||
| CVE-2024-52898 | 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ information disclosure | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-52897 | 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ information disclosure | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-52896 | 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ information disclosure | MEDIUM 6.2 | 0.3 % | ||
| CVE-2024-51470 | 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-40681 | 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ security bypass | HIGH 8.8 | 0.5 % | ||
| CVE-2024-40680 | 9.3 CD, 9.4 LTS, 9.4 CD | IBM MQ denial of service | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-35116 | 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD | IBM MQ denial of service | HIGH 7.5 | 0.7 % | ||
| CVE-2024-35156 | 9.3 LTS and 9.3 CD | IBM MQ information disclosure | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-35155 | 9.3 LTS and 9.3 CD | IBM MQ information disclosure | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-31912 | 9.3 LTS and 9.3 CD | IBM MQ privilege escalation | HIGH 8.8 | 0.4 % | ||
| CVE-2024-31919 | 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD | IBM MQ denial of service | HIGH 7.5 | 0.5 % | ||
| CVE-2024-25015 | 9.2 LTS, 9.3 LTS, 9.3 CD | IBM MQ denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45177 | 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD | IBM MQ denial of service | MEDIUM 5.3 | 0.6 % | ||
| CVE-2024-25016 | 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD | IBM MQ denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2023-28513 | 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, 9.3 CD | IBM MQ denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-28950 | 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.2 CD, 9.3 LTS, 9.3 CD | IBM MQ information disclosure | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-28514 | 8.0, 9.0 LTS, 9.0 CD, 9.1 LTS | IBM MQ information disclosure | MEDIUM 6.2 | 0.2 % | ||
| CVE-2023-26285 | 9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS | IBM MQ denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-22874 | 9.2 CD, 9.3 CD, and 9.3 LTS | IBM MQ denial of service | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-43919 | 9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS | IBM MQ denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2022-43902 | 9.2 CD, 9.2 LTS, 9.3 CD, 9.3 LTS | IBM MQ denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2022-42436 | 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 | IBM MQ information disclosure | MEDIUM 4.0 | 0.2 % | ||
| CVE-2022-31772 | 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 | IBM MQ denial of service | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-22489 | 8.0 ; 9.0.LTS ; 9.1.LTS ; … | IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML da | CRITICAL 9.1 | 1.7 % | ||
| CVE-2021-39034 | 9.1.0 | IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964. | HIGH 7.5 | 1.0 % | ||
| CVE-2021-38875 | 8.0.0 ; 9.0.0 ; 9.1.0 ; … | IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-38949 | 8.0.0 ; 9.0.0 ; 9.1.0 ; … | IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: | MEDIUM 6.2 | 0.2 % | ||
| CVE-2020-4682 | 8.0.0 ; 9.0.0 ; 9.1.0 ; … | IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe de | CRITICAL 9.8 | 7.6 % | ||
| CVE-2020-4870 | 9.2.0 | IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 19 | HIGH 7.5 | 1.7 % | ||
| CVE-2020-4320 | 8.0 ; 9.0.LTS ; 9.1.LTS ; … | IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate | MEDIUM 6.5 | 0.7 % | ||
| CVE-2020-4310 | 8.0 ; 9.0.LTS ; 9.1.LTS ; … | IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the D | HIGH 7.5 | 1.6 % | ||
| CVE-2020-4338 | 9.1.4 | IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force I | MEDIUM 5.5 | 0.3 % | ||
| CVE-2019-4762 | 9.0.0.1 ; 9.0.0.2 ; 9.0.0.3 ; … | IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625. | HIGH 7.5 | 1.6 % | ||
| CVE-2019-4719 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by incl | MEDIUM 5.5 | 0.3 % | ||
| CVE-2019-4656 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an auth | MEDIUM 6.5 | 1.4 % | ||
| CVE-2019-4619 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by incl | MEDIUM 5.5 | 0.3 % | ||
| CVE-2019-4614 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by convertin | MEDIUM 6.5 | 1.6 % | ||
| CVE-2019-4568 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service | MEDIUM 5.9 | 1.3 % | ||
| CVE-2019-4655 | 9.1.0.0 ; 9.1.0.1 ; 9.1.1 ; … | IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authentic | MEDIUM 4.3 | 1.3 % | ||
| CVE-2019-4560 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poor | MEDIUM 6.5 | 1.1 % | ||
| CVE-2019-4227 | 9.0.0.1 ; 8.0.0.4 ; 8.0.0.5 ; … | IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduc | HIGH 7.3 | 1.1 % | ||
| CVE-2019-4141 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a | MEDIUM 6.5 | 1.3 % | ||
| CVE-2019-4378 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is v | MEDIUM 6.5 | 1.4 % | ||
| CVE-2019-4049 | 9.1.0.0 ; 9.1.0.1 ; 9.1.1 ; … | IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of | MEDIUM 6.2 | 0.3 % | ||
| CVE-2019-4261 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack caus | MEDIUM 6.5 | 2.4 % | ||
| CVE-2019-4078 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrat | HIGH 7.8 | 0.4 % | ||
| CVE-2019-4039 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the erro | MEDIUM 6.2 | 0.3 % | ||
| CVE-2019-4055 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the T | HIGH 7.5 | 2.1 % | ||
| CVE-2018-1925 | 9.1.0.0 ; 9.1.0.1 ; 9.1.1 | IBM WebShere MQ 9.1.0.0, 9.1.0.1, 9.1.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly se | MEDIUM 5.9 | 0.9 % | ||
| CVE-2018-1836 | 9.0.2 ; 9.0.3 ; 9.0.4 ; … | IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows u | MEDIUM 5.4 | 1.0 % | ||
| CVE-2018-1998 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to a | HIGH 8.8 | 0.4 % | ||
| CVE-2018-1974 | 9.0.0.1 ; 8.0.0.1 ; 8.0.0.2 ; … | IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM | HIGH 7.5 | 1.3 % | ||
| CVE-2018-1883 | 9.0.2 ; 9.0.3 ; 9.0.4 ; … | A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service at | HIGH 7.5 | 2.4 % | ||
| CVE-2018-1792 | 9.0.1 ; 9.0.0.1 ; 9.0.2 ; … | IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code | HIGH 8.8 | 0.5 % | ||
| CVE-2018-1684 | 9.0.1 ; 9.0.0.1 ; 9.0.2 ; … | IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X | MEDIUM 6.5 | 1.3 % | ||
| CVE-2018-1543 | 8.0 ; 9.0 | IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the S | MEDIUM 5.9 | 1.1 % | ||
| CVE-2018-1419 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ P | MEDIUM 5.3 | 2.1 % | ||
| CVE-2017-1786 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all reso | MEDIUM 5.3 | 1.1 % | ||
| CVE-2018-1371 | 9.0.0.2 ; 9.0.4 ; 8.0.0.8 | An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process | MEDIUM 6.5 | 1.1 % | ||
| CVE-2017-1747 | 9.0 ; 9.0.1 ; 9.0.0.1 ; … | A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applic | MEDIUM 6.5 | 2.0 % | ||
| CVE-2017-1612 | 7.0.1 ; 7.1 ; 7.5 ; … | IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user. IBM X-Force ID: | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1699 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vu | LOW 3.3 | 0.3 % | ||
| CVE-2017-1557 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel | MEDIUM 4.3 | 1.3 % | ||
| CVE-2017-1760 | 7.5 ; 8.0 ; 9.0 ; … | IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. I | HIGH 7.1 | 0.3 % | ||
| CVE-2017-1433 | 7.5 ; 8.0 ; 9.0 ; … | IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which wou | MEDIUM 6.5 | 1.4 % | ||
| CVE-2017-1341 | 9.0 ; 9.0.1 ; 9.0.0.1 ; … | IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been | LOW 3.7 | 1.0 % | ||
| CVE-2017-1283 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which | MEDIUM 4.3 | 0.9 % | ||
| CVE-2017-1235 | 8.0 ; 8 | IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potential | MEDIUM 6.5 | 2.3 % | ||
| CVE-2017-1285 | 9.0.1 ; 9.0.2 | IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a specially crafted message that would cause a cha | MEDIUM 6.5 | 1.7 % | ||
| CVE-2017-1337 | 9.0.1 ; 9.0.2 | IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245. | HIGH 8.1 | 1.5 % | ||
| CVE-2017-1284 | 9.0.1 ; 9.0.2 | IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSpher | MEDIUM 4.7 | 0.3 % | ||
| CVE-2017-1236 | 9.0.2 | IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inqu | MEDIUM 6.5 | 1.4 % | ||
| CVE-2017-1117 | 8.0 ; 9.0 ; 9.0.1 ; … | IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X | MEDIUM 5.3 | 1.1 % | ||
| CVE-2016-6089 | 9.0.0.1 ; 9.0.2 | IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they should not have access to | MEDIUM 5.5 | 0.3 % |