Skip to content

Known vulnerabilities in IBM MQ

Is your version affected?

CVE Summary Score Published
CVE-2024-35156 IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical… 6.5 Medium Jun 28, 2024
CVE-2024-35155 IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a… 6.5 Medium Jun 28, 2024
CVE-2024-31912 IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations… 7.5 High Jun 28, 2024
CVE-2024-31919 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service… 5.9 Medium Jun 28, 2024
CVE-2024-25015 IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending… 7.5 High May 1, 2024
CVE-2023-45177 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error… 5.3 Medium Mar 20, 2024
CVE-2024-25016 IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a… 7.5 High Mar 3, 2024
CVE-2023-28513 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2… 5.9 Medium Jul 19, 2023
CVE-2023-28950 IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has… 5.1 Medium May 19, 2023
CVE-2023-28514 IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical… 6.2 Medium May 19, 2023
CVE-2023-26285 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error… 5.9 Medium May 5, 2023
CVE-2023-22874 IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration… 5.5 Medium May 5, 2023
CVE-2022-43919 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages… 5.3 Medium May 5, 2023
CVE-2022-43902 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted… 6.5 Medium Mar 1, 2023
CVE-2022-42436 IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive… 4.0 Medium Feb 8, 2023
CVE-2022-31772 IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a… 5.3 Medium Nov 11, 2022
CVE-2022-22489 IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack… 8.2 High Aug 19, 2022
CVE-2021-39034 IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process 5.3 Medium Feb 17, 2022
CVE-2021-38875 IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error… 6.5 Medium Nov 23, 2021
CVE-2021-38949 IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local… 6.2 Medium Nov 16, 2021
CVE-2020-4682 IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system,… 8.1 High Jan 28, 2021
CVE-2020-4870 IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications 5.9 Medium Dec 21, 2020
CVE-2020-4310 IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to… 5.9 Medium Jun 16, 2020
CVE-2020-4320 IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients… 5.3 Medium Jun 16, 2020
CVE-2020-4338 IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras… 5.1 Medium Apr 16, 2020

Other IBM products