Known vulnerabilities in IBM Supplied MQ Advanced Queue Manager Container images
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:ibm-mqadvanced-server-integration:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
25
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89108 - Heap-based Buffer Overflow CVE-2024-25048 |
CWE-122 | Low | 9.3.0.17-r1, 9.3.5.1-r1 | 02.05.2024 |
SB2024050222 SB2024050224 SB2024052406 and 5 more |
||
| #VU87830 - Missing release of memory after effective lifetime CVE-2024-1394 |
CWE-401 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 26.03.2024 |
SB2024032646 SB2024032647 SB2024032648 and 54 more |
||
| #VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24786 |
CWE-835 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 11.03.2024 |
SB2024031115 SB2024031435 SB2024031555 and 134 more |
||
| #VU87128 - Improper input validation CVE-2024-25016 |
CWE-20 | Medium | 9.3.0.16-r1, 9.3.3.3-r2, 9.3.5.0-r1 | 05.03.2024 |
SB2024030526 SB2024030614 SB2024031536 and 7 more |
||
| #VU87126 - Cleartext Transmission of Sensitive Information CVE-2023-47745 |
CWE-319 | Low | 9.3.0.16-r1, 9.3.3.3-r2, 9.3.5.0-r1 | 05.03.2024 |
SB2024030524 SB2024031536 SB2024032906 and 1 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-49569 |
CWE-22 | Medium | 9.3.0.16-r2, 9.3.5.0-r2 | 18.01.2024 |
SB2024011878 SB2024011879 SB2024020832 and 42 more |
||
| #VU85582 - Resource exhaustion CVE-2023-49568 |
CWE-400 | Medium | 9.3.0.16-r2, 9.3.5.0-r2 | 18.01.2024 |
SB2024011878 SB2024011879 SB2024020832 and 37 more |
||
| #VU85469 - Improper input validation CVE-2024-20952 |
CWE-20 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 189 more |
||
| #VU85369 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-26159 |
CWE-601 | Low | 9.3.0.16-r1, 9.3.3.3-r2, 9.3.5.0-r1 | 15.01.2024 |
SB2024011510 SB2024011517 SB2024011864 and 53 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 9.3.0.16-r2, 9.3.5.0-r2 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 9.3.0.17-r1, 9.3.5.1-r1 | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU82583 - Observable discrepancy CVE-2023-33850 |
CWE-203 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 31.10.2023 |
SB2023103131 SB2023111305 SB2023111407 and 106 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 9.3.0.17-r1, 9.3.5.1-r1 | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU72885 - Improper Authorization CVE-2023-26284 |
CWE-285 | Medium | 9.3.0.4-r1, 9.3.2.0-r1 | 06.03.2023 |
SB2023030652 |
||
| #VU62002 - Improper input validation CVE-2022-1271 |
CWE-20 | High | 9.2.0.5-r2-eus, 9.2.5.0-r3 | 08.04.2022 |
SB2022040803 SB2022040804 SB2022040822 and 134 more |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 9.2.0.5-r2-eus, 9.2.5.0-r3 | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |
||
| #VU56217 - Memory corruption CVE-2021-3634 |
CWE-119 | High | 9.2.0.5-r2-eus, 9.2.5.0-r3 | 31.08.2021 |
SB2021083135 SB2021083136 SB2022011903 and 46 more |
||
| #VU53978 - Improper input validation CVE-2021-3580 |
CWE-20 | Medium | 9.2.0.5-r2-eus, 9.2.5.0-r3 | 09.06.2021 |
SB2021060918 SB2021060919 SB2021061812 and 22 more |
||
| #VU8100 - Memory corruption CVE-2017-11468 |
CWE-119 | Low | 9.3.0.16-r2, 9.3.5.0-r2 | 05.09.2017 |
SB2017072002 SB2020091817 SB2023090532 and 9 more |
Showing elements 1 - 20 out of 25