3.1
Low
CVE-2020-4319 IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances,…
Description
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Appliance | 9.1.LTS | No fix stated |
| MQ Appliance | 8.0 | No fix stated |
Other CVEs of MQ Appliance
The 36 CVEs of MQ Appliance →
CVE-2026-12538
IBM MQ Appliance is affected by an improper validation vulnerability
5.4
Medium
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to…
10.0
Critical
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
5.9
Medium
CVE-2025-3631
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
6.5
Medium