Known vulnerabilities in IBM MQ - page 7

Software: IBM MQ
Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Total vulnerabilities: 209
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ IBM MQ is affected by 209 known vulnerabilities: 13 high, 96 medium, 100 low Critical High Medium Low

Vulnerabilities (209)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72683 - Improper input validation
CVE-2022-43902
CWE-20 Medium
No
No
9.1.0.13, 9.2.0.8, 9.3.0.2, 9.3.1.1 01.03.2023 SB2023030127
SB2023030140
SB2023060819
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
9.2.0.7, 9.3.0.2 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
9.2.0.7, 9.3.0.2 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
9.2.0.7, 9.3.0.2, 9.3.1 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
9.1.0.12, 9.2.0.7, 9.3.0.2, 9.3.1 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
9.3.0.2, 9.3.1.1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
9.3.0.2, 9.3.1.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
9.0.0.14, 9.1.0.13, 9.2.0.7, 9.3.0.2, 9.3.1.1 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624
CWE-20 Low
No
No
9.0.0.14, 9.1.0.13, 9.2.0.7, 9.3.0.2, 9.3.1.1 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750
CWE-121 Medium
No
No
9.2.0.7, 9.3.0.1, 9.3.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749
CWE-121 Medium
No
No
9.2.0.7, 9.3.0.1, 9.3.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
9.2.0.7, 9.3.0.2, 9.3.1.0 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752
CWE-121 Medium
No
No
9.2.0.7, 9.3.0.1, 9.3.1 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751
CWE-787 Medium
No
No
9.2.0.7, 9.3.0.1, 9.3.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476
CWE-290 Medium
No
No
9.1.0.12, 9.3.0.1, 9.3.1 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU64197 - Improper Authentication
CVE-2022-22475
CWE-287 Low
No
No
9.1.0.12, 9.2.0.6, 9.3 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU62400 - Improper input validation
CVE-2022-21496
CWE-20 Medium
No
No
- 19.04.2022 -
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
8.0.0.16, 9.0.0.13, 9.1.0.11, 9.2.0.6, 9.3 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU57493 - Improper input validation
CVE-2021-35561
CWE-20 Medium
No
No
- 19.10.2021 -
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
9.1.0.12, 9.2.0.7, 9.3.0.2, 9.3.1 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 121 - 140 out of 209