4.3
Medium
CVE-2020-4938 IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute…
Description
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Appliance | 9.2 | No fix stated |
| MQ Appliance | 9.1 | No fix stated |
Other CVEs of MQ Appliance
The 36 CVEs of MQ Appliance →
CVE-2026-12538
IBM MQ Appliance is affected by an improper validation vulnerability
5.4
Medium
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to…
10.0
Critical
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
5.9
Medium
CVE-2025-3631
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
6.5
Medium