| CVE-2026-12355 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
8.1
High
|
Sep 15, 2026 |
| CVE-2026-12666 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
8.1
High
|
Sep 15, 2026 |
| CVE-2026-12667 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
7.1
High
|
Sep 15, 2026 |
| CVE-2026-12728 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-13265 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
6.8
Medium
|
Sep 14, 2026 |
| CVE-2026-13275 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
7.1
High
|
Sep 14, 2026 |
| CVE-2026-13285 |
IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data
|
7.1
High
|
Sep 14, 2026 |
| CVE-2026-13293 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
8.8
High
|
Sep 14, 2026 |
| CVE-2026-13287 |
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…
|
7.1
High
|
Sep 14, 2026 |
| CVE-2026-1713 |
IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through…
|
5.5
Medium
|
Mar 3, 2026 |
| CVE-2025-36128 |
IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of…
|
7.5
High
|
Oct 16, 2025 |
| CVE-2025-36100 |
IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and…
|
5.1
Medium
|
Sep 7, 2025 |
| CVE-2025-3631 |
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
|
6.5
Medium
|
Jul 11, 2025 |
| CVE-2025-0985 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that…
|
5.5
Medium
|
Feb 28, 2025 |
| CVE-2024-54175 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow a local user to cause a denial of service due to an improper…
|
5.5
Medium
|
Feb 28, 2025 |
| CVE-2025-23225 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the…
|
6.5
Medium
|
Feb 28, 2025 |
| CVE-2024-54173 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be…
|
4.7
Medium
|
Feb 28, 2025 |
| CVE-2025-0975 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper…
|
8.8
High
|
Feb 28, 2025 |
| CVE-2024-52898 |
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when…
|
6.2
Medium
|
Jan 14, 2025 |
| CVE-2024-52897 |
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive…
|
6.2
Medium
|
Dec 19, 2024 |
| CVE-2024-52896 |
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive…
|
6.2
Medium
|
Dec 19, 2024 |
| CVE-2024-51470 |
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE…
|
6.5
Medium
|
Dec 18, 2024 |
| CVE-2024-40681 |
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically…
|
7.5
High
|
Sep 7, 2024 |
| CVE-2024-40680 |
IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation…
|
5.5
Medium
|
Sep 7, 2024 |
| CVE-2024-35116 |
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error…
|
5.9
Medium
|
Jun 28, 2024 |