Known vulnerabilities in IBM MQ - page 6

Software: IBM MQ
Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Total vulnerabilities: 240
Public exploits: 6
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ IBM MQ is affected by 240 known vulnerabilities: 17 high, 114 medium, 109 low Critical High Medium Low

Vulnerabilities (240)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89792 - Insufficient Control of Network Message Volume (Network Amplification)
CVE-2024-25015
CWE-406 Medium
No
No
9.2.0.25, 9.3.0.17, 9.3.5 24.05.2024 SB2024052408
SB2024060320
SB2024070811
and 1 more
#VU89108 - Heap-based Buffer Overflow
CVE-2024-25048
CWE-122 Low
No
No
9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5 02.05.2024 SB2024050222
SB2024050224
SB2024052406
and 5 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
9.1.0.22, 9.2.0.26, 9.3.0.20, 9.4 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87188 - Inefficient Regular Expression Complexity
CVE-2022-25844
CWE-1333 Medium
No
No
9.3.0 07.03.2024 SB2024030721
SB2024040929
SB2024042411
and 10 more
#VU87182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25869
CWE-79 Medium
No
No
9.3.0 07.03.2024 SB2024030715
SB2024040929
SB2024042411
and 9 more
#VU87128 - Improper input validation
CVE-2024-25016
CWE-20 Medium
No
No
9.0.0.23, 9.1.0.20, 9.2.0.22, 9.3.0.16, 9.3.5 05.03.2024 SB2024030526
SB2024030614
SB2024031536
and 7 more
#VU87126 - Cleartext Transmission of Sensitive Information
CVE-2023-47745
CWE-319 Low
No
No
9.3.0.16, 9.3.5 05.03.2024 SB2024030524
SB2024031536
SB2024032906
and 1 more
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218
CWE-611 Low
No
No
9.0.0.23, 9.1.0.20, 9.2.0.22, 9.3.5 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85399 - Resource Management Errors
CVE-2023-6237
CWE-399 Low
No
No
9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17 15.01.2024 SB2024011522
SB2024012250
SB2024012612
and 53 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159
CWE-601 Low
No
No
9.2.0.22, 9.3.0.16, 9.3.5 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
9.0.0.24, 9.1.0.21, 9.2.0.25, 9.3.0.17, 9.3.5.1 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
9.0.0.23, 9.1.0.20, 9.2.0.22, 9.3.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 655 more
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116
CWE-1333 Medium
No
No
9.3.0 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU81699 - Inefficient Regular Expression Complexity
CVE-2023-26118
CWE-1333 Medium
No
No
9.3.0 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU79803 - Memory corruption
CVE-2023-39976
CWE-119 High
No
No
9.2.0.22, 9.3.0.16, 9.3.5 21.08.2023 SB20230821103
SB20230821228
SB2023082854
and 22 more
#VU79318 - Inefficient Regular Expression Complexity
CVE-2023-26117
CWE-1333 Medium
No
No
9.3.0 10.08.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU78413 - Improper input validation
CVE-2023-22045
CWE-20 Low
No
No
9.0.0.21, 9.1.0.18 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more


Showing elements 101 - 120 out of 240