Known vulnerabilities in IBM MQ 9.2 IT40099

Software: IBM MQ
Version: 9.2 IT40099
Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM MQ version 9.2 IT40099 IBM MQ 9.2 IT40099 is affected by 24 vulnerabilities: 1 high, 15 medium, 8 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122086 - Type confusion
CVE-2026-22796
CWE-843 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 50 more
#VU122085 - NULL Pointer Dereference
CVE-2026-22795
CWE-476 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 47 more
#VU122084 - NULL Pointer Dereference
CVE-2025-69421
CWE-476 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122083 - Type confusion
CVE-2025-69420
CWE-843 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 48 more
#VU122082 - Out-of-bounds write
CVE-2025-69419
CWE-787 Low
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 68 more
#VU122081 - Cleartext Transmission of Sensitive Information
CVE-2025-69418
CWE-319 Low
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 45 more
#VU122080 - Out-of-bounds write
CVE-2025-68160
CWE-787 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 48 more
#VU122079 - Resource exhaustion
CVE-2025-66199
CWE-400 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 16 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469
CWE-197 Low
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 13 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468
CWE-476 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 17 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467
CWE-121 High
Public exploit available
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 64 more
#VU122075 - Stack-based buffer overflow
CVE-2025-11187
CWE-121 Medium
No
No
9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU101266 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-51470
CWE-754 Low
No
No
9.1.0.26, 9.4.0.7 05.12.2024 SB2024120522
SB2024121854
#VU75593 - Improper input validation
CVE-2023-26285
CWE-20 Medium
No
No
9.0.0.17, 9.2.0.11, 9.3.0.5, 9.3.2.1 28.04.2023 SB2023042850
SB2023042853
SB2023071403
and 2 more
#VU75592 - Information Exposure Through Log Files
CVE-2023-28950
CWE-532 Low
No
No
9.0.0.17, 9.2.0.11, 9.3.0.5, 9.3.2.1 28.04.2023 SB2023042849
SB2023060211
SB2023071403
and 1 more
#VU75590 - Improper input validation
CVE-2022-43919
CWE-20 Medium
No
No
9.0.0.17, 9.2.0.10, 9.3.0.5, 9.3.2.0 28.04.2023 SB2023042847
SB2023042852
SB2023051921
and 2 more
#VU73189 - Improper input validation
CVE-2022-40237
CWE-20 Medium
No
No
9.0.0.16, 9.2.0.10, 9.3.0.4, 9.3.2.0 09.03.2023 SB2023030913
SB2023030919
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
9.2.0.7, 9.3.0.2 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533
CWE-345 Low
No
No
9.0.0.14, 9.1.0.13, 9.2.0.8, 9.3.0.3, 9.3.1.1 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
9.2.0.7, 9.3.0.2 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more


Showing elements 1 - 20 out of 24