IBM WebSphere MQ
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-4310 | 7.1 ; 7.5 | IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the D | HIGH 7.5 | 1.6 % | ||
| CVE-2012-4863 | 7.1 without Fix Pack 7.1.0.2 ; 7.5 without Fix Pack 7.5.0.1 | IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability | MEDIUM 6.5 | 1.2 % | ||
| CVE-2018-1551 | 8.0.0.2 ; 8.0.0.4 ; 8.0.0.3 ; … | IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ | HIGH 7.5 | 1.1 % | ||
| CVE-2018-1503 | 7.5 ; 8.0 ; 9.0 | IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause me | MEDIUM 4.3 | 2.0 % | ||
| CVE-2017-1795 | 7.5 ; 8.0 ; 9.0.1 ; … | IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSp | MEDIUM 4.4 | 0.4 % | ||
| CVE-2018-1374 | 7.1 ; 7.5 ; 7.5.0.1 ; … | An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) clien | MEDIUM 6.5 | 1.4 % | ||
| CVE-2018-1388 | 7.0.1.1 ; 7.0.1.2 ; 7.0.1.3 ; … | GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212. | HIGH 7.5 | 2.2 % | ||
| CVE-2017-1118 | 2.1 ; 2.0 | IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configure | HIGH 7.5 | 1.9 % |