Known vulnerabilities in IBM MQ - page 3
Vendor:
IBM Corporation
Software:
IBM MQ
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
240
Public exploits:
6
Known exploited (KEV):
2
Breakdown by Severity Chart
9.1.0.38
9.2.0.44
9.3.0.42
9.4.0.26
10.0.0.5
9.4.3.0
9.4.0.24
9.4.0.23
9.4.0.22
10.0.0.0
9.4.0.25
9.3.0.41
9.2.0.43
9.1.0.37
9.4.0.21
9.3.0.40
9.2.0.42
9.1.0.36
9.4.5.1
9.4.0.19
9.4.0.18
9.4.0.20
9.3.0.37
9.1.0.34
9.2.0.41
9.4.4.0
9.4.0.16
9.4.0.15
9.4.0.14
9.4.0.13
9.4.0.12
9.4.0.11
9.4.0.9
9.4.0.8
9.3.0.35
9.3.0.34
9.3.0.33
9.3.0.32
9.3.0.31
9.3.0.30
9.3.0.29
9.3.0.28
9.2.0.40
9.2.0.39
9.2.0.38
9.2.0.37
9.2.0.36
9.2.0.35
9.2.0.34
9.2.0.33
9.2.0.32
9.1.0.28
9.1.0.29
9.1.0.30
9.1.0.31
9.1.0.32
9.1.0.33
9.3.0.36
9.4.0.17
9.4.4.1
9.4.0.10
9.3.0.27
9.2.0.31
9.1.0.27
9.4.2
8.0.0.16 SU2
1.8.2 CD
1.3.4 EUS
9.2.0.30
9.2.0.29
9.2.0.24
9.2.0.23
9.2.0.19
9.2.0.18
9.2.0.17
9.2.0.14
9.2.0.13
9.2.0.12
9.3.0.24
9.3.0.23
9.3.0.22
9.3.0.19
9.3.0.18
9.3.0.14
9.3.0.13
9.3.0.12
9.3.0.9
9.3.0.8
9.3.0.7
9.4.0.4
9.4.0.3
9.4.0.2
9.4.0.1
9.4.0.0
9.4.1.1
9.3.0.26
9.1.0.26
9.4.0.7
9.4.0.6
9.3.0.25
9.2.0.28
9.1.0.24
9.4.1
9.4.0.5
9.3.0.21
9.2.0.27
9.1.0.23
9.0.0.27
9.3.5.2
9.3.0.20 FixPack
9.0.0.25
9.0.0.26
9.2.0.26
9.4
9.3.0.20
9.1.0.22
9.3.5.1
9.3.0.17
9.2.0.25
9.1.0.21
9.0.0.24
9.3.0
9.3.0.16
9.3.5
9.2.0.22
9.1.0.20
9.0.0.23
7.5.0.9
9.2
9.1
9.0
9.3.4.1
9.3.0.15
9.2.0.21
9.1.0.19
9.0.0.22
9.3.4
9.3.0.11
9.2.0.20
9.1.0.18
9.0.0.21
9.3.3.1
9.3.0.10
9.2.0.16
9.1.0.17
9.0.0.19
9.3.3
9.3.0.6
9.2.0.15
9.1.0.16
9.0.0.18
9.3.0.5-r3
9.3.2.1
9.0.0.17
9.2.0.11
9.3.0.5
9.0.0.15
9.3.2.0
9.3.0.3
9.3.0.4
9.0.0.16
9.3.0.0
9.2.0.10
9.2.0.9
9.2.0.8
9.1.0.13
9.0.0.14
9.3.1.1
9.3.1.0
9.3.0.2
9.2.0.7
9.3.1
9.3.0.1
9.1.0.12
9.3
9.2.0.6
9.2.0.1
9.2.0.2
9.2.0.3
9.2.0.4
9.2.4 CD
9.2.0.5
9.2.5 CD
9.2 IT40099
9.1.0.11
9.1.0.10
9.1.0.9
9.1.0.8
9.1.0.7
9.1.0.6
9.1.0.5
9.1.0.4
9.1.0.3
9.1.0.2
9.0.0.13
9.0.0.12
9.0.0.11
9.0.0.10
9.0.0.9
9.0.0.8
9.0.0.7
9.0.0.6
9.0.0.0
8.0.0.16
8.0.0.15
8.0.0.14
8.0.0.13
8.0.0.12
8.0.0.11
9.2.1.0
9.2.0.0
9.1.5.0
9.1.3.0
9.1.2.0
9.1.1.0
9.0.5.0
9.2.2.0
9.1.4.0
9.1.1
9.1.0.1
5.3.1.15
9.1.0.0
9.0.0.5
9.0.0.4
8.0.0.10
7.1.0.9
8.0.0.9
7.0.1.14
7.0.1.13
9.0.0.3
9.0.4
9.0.0.2
8.0.0.8
8.0.0.7
7.5.0.8
9.0.0.1
9.0.5
8.0.0.6
8.0.0.5
7.5.0.7
7.5.0.6
7.1.0.8
7.1.0.7
9.0.3
9.0.2
9.0.1
9.0.0
8.0.0.4
7.1.0.6
7.5.0.5
8.0.0.3
8.0.0.2
8.0
8.0.0.1
7.0.1.12
7.0.1.11
7.1.0.5
7.5.0.4
8.0.0.0
7.5.0.3
7.1.0.3
7.1.0.4
7.5.0.2
7.0.1.9
7.5.0.1
7.1.0.2
7.1.0.1
7.0.1.10
7.0.4
7.0.4.0
7.0.2.2
7.0.2.0
7.0.1.6
7.0.1.7
7.5
7.0.1.5
7.1
7.0.1.8
7.0.1.4
6.0.2.9
6.0.2.8
7.0.1.2
7.0.1.3
7.0.1
7.0.0
7.0.1.1
7.0.1.0
7.0.0.0
6.0.2.7
6.0.2.10
7.0.0.2
6.0.2.5
6.0.2.6
6.0.1.0
6.0.2.1
6.0.0.0
6.0.1.1
7.0.0.1
6.0.2.3
7.0
6.0.2.2
6.0.2.4
5.1
5.3.1
6
5.3
6.0.2.0
6.0
Vulnerabilities (240)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-14914 |
CWE-22 | Low | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20, 9.4.5.1 | 12.02.2026 |
SB2026021209 SB2026021210 SB2026021212 and 23 more |
||
| #VU122086 - Type confusion CVE-2026-22796 |
CWE-843 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 51 more |
||
| #VU122085 - NULL Pointer Dereference CVE-2026-22795 |
CWE-476 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 48 more |
||
| #VU122084 - NULL Pointer Dereference CVE-2025-69421 |
CWE-476 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 50 more |
||
| #VU122083 - Type confusion CVE-2025-69420 |
CWE-843 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122082 - Out-of-bounds write CVE-2025-69419 |
CWE-787 | Low | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 69 more |
||
| #VU122081 - Cleartext Transmission of Sensitive Information CVE-2025-69418 |
CWE-319 | Low | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 50 more |
||
| #VU122080 - Out-of-bounds write CVE-2025-68160 |
CWE-787 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122079 - Resource exhaustion CVE-2025-66199 |
CWE-400 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 18 more |
||
| #VU122078 - Numeric Truncation Error CVE-2025-15469 |
CWE-197 | Low | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 15 more |
||
| #VU122077 - NULL Pointer Dereference CVE-2025-15468 |
CWE-476 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 19 more |
||
| #VU122076 - Stack-based buffer overflow CVE-2025-15467 |
CWE-121 | High | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 67 more |
||
| #VU122075 - Stack-based buffer overflow CVE-2025-11187 |
CWE-121 | Medium | 9.1.0.34, 9.2.0.41, 9.3.0.37, 9.4.0.20 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 20 more |
||
| #VU117483 - Improper input validation CVE-2025-53066 |
CWE-20 | Medium | 9.1.0.33, 9.2.0.40, 9.3.0.36, 9.4.0.17, 9.4.4.1 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 119 more |
||
| #VU117484 - Improper input validation CVE-2025-53057 |
CWE-20 | Medium | 9.1.0.33, 9.2.0.40, 9.3.0.36, 9.4.0.17, 9.4.4.1 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 122 more |
||
| #VU117427 - Missing Release of Resource after Effective Lifetime CVE-2025-36128 |
CWE-772 | High | - | 21.10.2025 |
SB2025102161 |
||
| #VU98644 - Improper input validation CVE-2024-21235 |
CWE-20 | Medium | 9.1.0.27, 9.2.0.31, 9.3.0.27, 9.4.0.10, 9.4.2 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 129 more |
||
| #VU60083 - Improper Access Control CVE-2021-41035 |
CWE-284 | High | 9.0.0.13, 9.1.0.10, 9.2.0.5 | 27.01.2022 |
SB2022012712 SB2022020177 SB2022021424 and 28 more |
||
| #VU57495 - Improper input validation CVE-2021-35578 |
CWE-20 | Medium | 9.0.0.13, 9.1.0.10, 9.2.0.5 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 95 more |
||
| #VU57497 - Improper input validation CVE-2021-35588 |
CWE-20 | Low | 9.0.0.13, 9.1.0.10, 9.2.0.5 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 52 more |
Showing elements 41 - 60 out of 240