Known vulnerabilities in IBM MQ - page 4
Vendor:
IBM Corporation
Software:
IBM MQ
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
209
Public exploits:
6
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
9.3.0.41
9.2.0.43
9.1.0.37
9.4.0.21
9.3.0.40
9.2.0.42
9.1.0.36
9.4.5.1
9.4.0.19
9.4.0.18
9.4.0.20
9.3.0.37
9.1.0.34
9.2.0.41
9.4.4.0
9.4.0.16
9.4.0.15
9.4.0.14
9.4.0.13
9.4.0.12
9.4.0.11
9.4.0.9
9.4.0.8
9.3.0.35
9.3.0.34
9.3.0.33
9.3.0.32
9.3.0.31
9.3.0.30
9.3.0.29
9.3.0.28
9.2.0.40
9.2.0.39
9.2.0.38
9.2.0.37
9.2.0.36
9.2.0.35
9.2.0.34
9.2.0.33
9.2.0.32
9.1.0.28
9.1.0.29
9.1.0.30
9.1.0.31
9.1.0.32
9.1.0.33
9.3.0.36
9.4.0.17
9.4.4.1
9.4.0.10
9.3.0.27
9.2.0.31
9.1.0.27
9.4.2
8.0.0.16 SU2
1.8.2 CD
1.3.4 EUS
9.2.0.30
9.2.0.29
9.2.0.24
9.2.0.23
9.2.0.19
9.2.0.18
9.2.0.17
9.2.0.14
9.2.0.13
9.2.0.12
9.3.0.24
9.3.0.23
9.3.0.22
9.3.0.19
9.3.0.18
9.3.0.14
9.3.0.13
9.3.0.12
9.3.0.9
9.3.0.8
9.3.0.7
9.4.0.4
9.4.0.3
9.4.0.2
9.4.0.1
9.4.0.0
9.4.1.1
9.3.0.26
9.1.0.26
9.4.0.7
9.4.0.6
9.3.0.25
9.2.0.28
9.1.0.24
9.4.1
9.4.0.5
9.3.0.21
9.2.0.27
9.1.0.23
9.0.0.27
9.3.5.2
9.3.0.20 FixPack
9.0.0.25
9.0.0.26
9.2.0.26
9.4
9.3.0.20
9.1.0.22
9.3.5.1
9.3.0.17
9.2.0.25
9.1.0.21
9.0.0.24
9.3.0
9.3.0.16
9.3.5
9.2.0.22
9.1.0.20
9.0.0.23
7.5.0.9
9.2
9.1
9.0
9.3.4.1
9.3.0.15
9.2.0.21
9.1.0.19
9.0.0.22
9.3.4
9.3.0.11
9.2.0.20
9.1.0.18
9.0.0.21
9.3.3.1
9.3.0.10
9.2.0.16
9.1.0.17
9.0.0.19
9.3.3
9.3.0.6
9.2.0.15
9.1.0.16
9.0.0.18
9.3.0.5-r3
9.3.2.1
9.0.0.17
9.2.0.11
9.3.0.5
9.0.0.15
9.3.2.0
9.3.0.3
9.3.0.4
9.0.0.16
9.3.0.0
9.2.0.10
9.2.0.9
9.2.0.8
9.1.0.13
9.0.0.14
9.3.1.1
9.3.1.0
9.3.0.2
9.2.0.7
9.3.1
9.3.0.1
9.1.0.12
9.3
9.2.0.6
9.2.0.1
9.2.0.2
9.2.0.3
9.2.0.4
9.2.4 CD
9.2.0.5
9.2.5 CD
9.2 IT40099
9.1.0.11
9.1.0.10
9.1.0.9
9.1.0.8
9.1.0.7
9.1.0.6
9.1.0.5
9.1.0.4
9.1.0.3
9.1.0.2
9.0.0.13
9.0.0.12
9.0.0.11
9.0.0.10
9.0.0.9
9.0.0.8
9.0.0.7
9.0.0.6
9.0.0.0
8.0.0.16
8.0.0.15
8.0.0.14
8.0.0.13
8.0.0.12
8.0.0.11
9.2.1.0
9.2.0.0
9.1.5.0
9.1.3.0
9.1.2.0
9.1.1.0
9.0.5.0
9.2.2.0
9.1.4.0
9.1.1
9.1.0.1
5.3.1.15
9.1.0.0
9.0.0.5
9.0.0.4
8.0.0.10
7.1.0.9
8.0.0.9
7.0.1.14
7.0.1.13
9.0.0.3
9.0.4
9.0.0.2
8.0.0.8
8.0.0.7
7.5.0.8
9.0.0.1
9.0.5
8.0.0.6
8.0.0.5
7.5.0.7
7.5.0.6
7.1.0.8
7.1.0.7
9.0.3
9.0.2
9.0.1
9.0.0
8.0.0.4
7.1.0.6
7.5.0.5
8.0.0.3
8.0.0.2
8.0
8.0.0.1
7.0.1.12
7.0.1.11
7.1.0.5
7.5.0.4
8.0.0.0
7.5.0.3
7.1.0.3
7.1.0.4
7.5.0.2
7.0.1.9
7.5.0.1
7.1.0.2
7.1.0.1
7.0.1.10
7.0.4
7.0.4.0
7.0.2.2
7.0.2.0
7.0.1.6
7.0.1.7
7.5
7.0.1.5
7.1
7.0.1.8
7.0.1.4
6.0.2.9
6.0.2.8
7.0.1.2
7.0.1.3
7.0.1
7.0.0
7.0.1.1
7.0.1.0
7.0.0.0
6.0.2.7
6.0.2.10
7.0.0.2
6.0.2.5
6.0.2.6
6.0.1.0
6.0.2.1
6.0.0.0
6.0.1.1
7.0.0.1
6.0.2.3
7.0
6.0.2.2
6.0.2.4
5.1
5.3.1
6
5.3
6.0.2.0
6.0
Vulnerabilities (209)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93442 - Error Handling CVE-2024-35116 |
CWE-388 | Medium | 9.0.0.26, 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 27.06.2024 |
SB2024062746 SB2024062747 SB2024070243 and 5 more |
||
| #VU93441 - Permissions, Privileges, and Access Controls CVE-2024-31912 |
CWE-264 | Medium | 9.3.0.20, 9.4 | 27.06.2024 |
SB2024062746 SB2024070243 SB2024100219 and 2 more |
||
| #VU89792 - Insufficient Control of Network Message Volume (Network Amplification) CVE-2024-25015 |
CWE-406 | Medium | 9.2.0.25, 9.3.0.17, 9.3.5 | 24.05.2024 |
SB2024052408 SB2024060320 SB2024070811 and 1 more |
||
| #VU89108 - Heap-based Buffer Overflow CVE-2024-25048 |
CWE-122 | Low | 9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5 | 02.05.2024 |
SB2024050222 SB2024050224 SB2024052406 and 5 more |
||
| #VU88977 - Resource exhaustion CVE-2024-25026 |
CWE-400 | Medium | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 24.04.2024 |
SB2024042458 SB2024042525 SB2024042626 and 68 more |
||
| #VU88803 - Server-Side Request Forgery (SSRF) CVE-2024-22329 |
CWE-918 | Medium | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 18.04.2024 |
SB2024041812 SB2024042613 SB2024043016 and 67 more |
||
| #VU88802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-22354 |
CWE-611 | High | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 18.04.2024 |
SB2024041812 SB2024042628 SB2024050920 and 66 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU88136 - Resource exhaustion CVE-2024-27268 |
CWE-400 | Medium | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 04.04.2024 |
SB2024040437 SB2024050803 SB2024052003 and 40 more |
||
| #VU88123 - Resource exhaustion CVE-2024-22353 |
CWE-400 | Medium | 9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 | 04.04.2024 |
SB2024040423 SB2024050220 SB2024050801 and 31 more |
||
| #VU87188 - Inefficient Regular Expression Complexity CVE-2022-25844 |
CWE-1333 | Medium | 9.3.0 | 07.03.2024 |
SB2024030721 SB2024040929 SB2024042411 and 10 more |
||
| #VU87182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-25869 |
CWE-79 | Medium | 9.3.0 | 07.03.2024 |
SB2024030715 SB2024040929 SB2024042411 and 9 more |
||
| #VU87128 - Improper input validation CVE-2024-25016 |
CWE-20 | Medium | 9.0.0.23, 9.1.0.20, 9.2.0.22, 9.3.0.16, 9.3.5 | 05.03.2024 |
SB2024030526 SB2024030614 SB2024031536 and 7 more |
||
| #VU85808 - NULL Pointer Dereference CVE-2024-0727 |
CWE-476 | Medium | 9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17 | 25.01.2024 |
SB2024012552 SB2024020525 SB2024021323 and 100 more |
||
| #VU85469 - Improper input validation CVE-2024-20952 |
CWE-20 | Medium | 9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5.1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 189 more |
||
| #VU85399 - Resource Management Errors CVE-2023-6237 |
CWE-399 | Low | 9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17 | 15.01.2024 |
SB2024011522 SB2024012250 SB2024012612 and 52 more |
||
| #VU82583 - Observable discrepancy CVE-2023-33850 |
CWE-203 | Medium | 9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5.1 | 31.10.2023 |
SB2023103131 SB2023111305 SB2023111407 and 106 more |
||
| #VU81703 - Inefficient Regular Expression Complexity CVE-2023-26116 |
CWE-1333 | Medium | 9.3.0 | 09.10.2023 |
SB2023081008 SB2023100921 SB2023100922 and 14 more |
||
| #VU81699 - Inefficient Regular Expression Complexity CVE-2023-26118 |
CWE-1333 | Medium | 9.3.0 | 09.10.2023 |
SB2023081008 SB2023100921 SB2023100922 and 14 more |
||
| #VU79318 - Inefficient Regular Expression Complexity CVE-2023-26117 |
CWE-1333 | Medium | 9.3.0 | 10.08.2023 |
SB2023081008 SB2023100921 SB2023100922 and 14 more |
Showing elements 61 - 80 out of 209