Known vulnerabilities in IBM MQ Appliance - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_appliance:*:*:*:*:*:*:*:*
Total vulnerabilities: 104
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Appliance IBM MQ Appliance is affected by 104 known vulnerabilities: 8 high, 58 medium, 38 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123325 - Authentication Bypass by Primary Weakness
CVE-2026-1713
CWE-305 Low
No
No
9.4.0.20, 9.4.5.0 27.02.2026 SB2026022727
#VU117276 - Improper input validation
CVE-2025-39971
CWE-20 Low
No
No
9.4.0.20, 9.4.5.0 15.10.2025 SB20251015124
SB2025102476
SB2025102477
and 57 more
#VU116879 - Resource Management Errors
CVE-2025-39955
CWE-399 Low
No
No
9.4.0.20, 9.4.5.0 09.10.2025 SB2025100969
SB2025111182
SB2025111213
and 50 more
#VU103502 - Use After Free
CVE-2022-49043
CWE-416 Medium
No
No
9.3.0.28, 9.4.0.11, 9.4.2.1 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU101111 - Divide By Zero
CVE-2024-53122
CWE-369 Low
No
No
9.3.0.27, 9.4.0.10, 9.4.2 03.12.2024 SB2024120317
SB2025010804
SB2025010805
and 65 more
#VU100705 - Missing release of memory after effective lifetime
CVE-2024-53088
CWE-401 Low
No
No
9.3.0.27, 9.4.0.10, 9.4.2 20.11.2024 SB2024112032
SB2024112401
SB2024121502
and 47 more
#VU97462 - Out-of-bounds write
CVE-2024-0533
CWE-787 Low
No
No
9.3.0.21, 9.4.0.5 18.09.2024 SB2024091820
SB2024091821
#VU97306 - Incorrect Privilege Assignment
CVE-2024-40681
CWE-266 Low
No
No
9.3.0.21, 9.4.0.5 16.09.2024 SB2024091615
SB2024091816
SB2024091817
and 2 more
#VU97305 - Allocation of Resources Without Limits or Throttling
CVE-2024-40680
CWE-770 Low
No
No
9.4.0.5 16.09.2024 SB2024091615
SB2024091625
SB2024091736
and 2 more
#VU93442 - Error Handling
CVE-2024-35116
CWE-388 Medium
No
No
9.3.0.20, 9.3.5.2 27.06.2024 SB2024062746
SB2024062747
SB2024070243
and 5 more
#VU89895 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-52881
CWE-451 Medium
No
No
9.3.0.25, 9.4.0.6 29.05.2024 SB2024052952
SB2024070462
SB2024070904
and 69 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
9.3.0.20, 9.3.5.2 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
9.3.0.20, 9.3.5.2 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041
CWE-601 Medium
No
No
9.3.0.20, 9.3.5.2 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
9.3.0.20, 9.3.5.2 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 89 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553
CWE-208 Medium
No
No
9.3.0.21, 9.4.0.5 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
9.3.0.20, 9.3.5.2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981
CWE-208 Medium
No
No
9.3.0.21, 9.4.0.5 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU63697 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22325
CWE-200 Low
No
No
9.2.5 CD 26.05.2022 SB2022052634
SB2025012313
#VU27882 - Out-of-bounds write
CVE-2020-12762
CWE-787 High
No
No
9.3.0.20, 9.3.5.2 13.05.2020 SB2020051323
SB2020052812
SB2020061526
and 54 more


Showing elements 21 - 40 out of 104