8.4
High
CVE-2019-4294 IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through…
Description
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Appliance 9.1 | 9.1.0.0 → 9.1.2 | No fix stated |
| MQ Appliance 8.0 | 8.0.0.0 → 8.0.0.12 | No fix stated |
| DataPower Gateway 2018.4 | 2018.4.1.0 → 2018.4.1.6 | No fix stated |
| DataPower Gateway 7.6 | 7.6.0.0 → 7.6.0.15 | No fix stated |
Other CVEs of MQ Appliance
The 36 CVEs of MQ Appliance →
CVE-2026-12538
IBM MQ Appliance is affected by an improper validation vulnerability
5.4
Medium
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to…
10.0
Critical
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
5.9
Medium
CVE-2025-3631
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
6.5
Medium