Known vulnerabilities in IBM MQ - page 8

Software: IBM MQ
Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq:*:*:*:*:*:*:*:*
Total vulnerabilities: 209
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ IBM MQ is affected by 209 known vulnerabilities: 13 high, 96 medium, 100 low Critical High Medium Low

Vulnerabilities (209)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63705 - Incorrect Authorization
CVE-2022-22316
CWE-863 Low
No
No
8.0.0.16, 9.0.0.13, 9.1.0.11, 9.2.0.5, 9.2.5 CD 26.05.2022 SB2022052635
SB2022051330
#VU63697 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22325
CWE-200 Low
No
No
8.0.0.16, 9.0.0.13, 9.1.0.11, 9.2 IT40099, 9.2.5 CD 26.05.2022 SB2022052634
SB2025012313
#VU63011 - Cleartext Transmission of Sensitive Information
CVE-2022-30115
CWE-319 Low
No
No
- 11.05.2022 -
#VU63007 - Improper input validation
CVE-2022-27780
CWE-20 Low
No
No
- 11.05.2022 -
#VU62401 - Improper input validation
CVE-2022-21434
CWE-20 Medium
No
No
- 19.04.2022 -
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
- 19.04.2022 -
#VU60083 - Improper Access Control
CVE-2021-41035
CWE-284 High
No
No
9.0.0.13, 9.1.0.10, 9.2.0.5 27.01.2022 SB2022012712
SB2022020177
SB2022021424
and 28 more
#VU59719 - Improper input validation
CVE-2022-21291
CWE-20 Medium
No
No
9.0.0.13, 9.1.0.11, 9.2.0.6, 9.3 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 67 more
#VU59720 - Improper input validation
CVE-2022-21305
CWE-20 Medium
No
No
9.0.0.13, 9.1.0.11, 9.2.0.6, 9.3 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 85 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
9.2.4 CD 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
- 18.12.2021 -
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
- 15.12.2021 -
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
9.0.0.13, 9.1.0.11, 9.2.0.6, 9.3 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57495 - Improper input validation
CVE-2021-35578
CWE-20 Medium
No
No
9.0.0.13, 9.1.0.10, 9.2.0.5 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57496 - Improper input validation
CVE-2021-35603
CWE-20 Low
No
No
9.0.0.13, 9.1.0.11, 9.2.0.6, 9.3 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU57497 - Improper input validation
CVE-2021-35588
CWE-20 Low
No
No
9.0.0.13, 9.1.0.10, 9.2.0.5 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 52 more
#VU16281 - Permissions, Privileges, and Access Controls
CVE-2018-1883
CWE-264 Low
No
No
9.1.0.1, 9.1.1 05.12.2018 SB2018120509
#VU15959 - Permissions, Privileges, and Access Controls
CVE-2018-12539
CWE-264 Low
No
No
9.1.0.1, 9.1.1 19.11.2018 SB2018111910
SB2018122010
SB2023012702
and 10 more
#VU15958 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1656
CWE-22 Low
No
No
9.1.0.1, 9.1.1 19.11.2018 SB2018111910
SB2018122010
SB2023012702
and 8 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737
CWE-200 Low
No
No
5.3.1.15 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more


Showing elements 141 - 160 out of 209