Known vulnerabilities in IBM MQ Appliance - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_appliance:*:*:*:*:*:*:*:*
Total vulnerabilities: 104
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Appliance IBM MQ Appliance is affected by 104 known vulnerabilities: 8 high, 58 medium, 38 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89108 - Heap-based Buffer Overflow
CVE-2024-25048
CWE-122 Low
No
No
9.3.0.17, 9.3.5 02.05.2024 SB2024050222
SB2024050224
SB2024052406
and 5 more
#VU87188 - Inefficient Regular Expression Complexity
CVE-2022-25844
CWE-1333 Medium
No
No
9.3.0.0 07.03.2024 SB2024030721
SB2024040929
SB2024042411
and 10 more
#VU87182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25869
CWE-79 Medium
No
No
9.3.0.0 07.03.2024 SB2024030715
SB2024040929
SB2024042411
and 9 more
#VU87128 - Improper input validation
CVE-2024-25016
CWE-20 Medium
No
No
9.3.0.16, 9.3.5 05.03.2024 SB2024030526
SB2024030614
SB2024031536
and 7 more
#VU86577 - Use After Free
CVE-2024-1086
CWE-416 High
Available
Exploited
9.3.0.20, 9.3.5.2 19.02.2024 SB2024021923
SB2024021925
SB2024021926
and 116 more
#VU86575 - Integer overflow
CVE-2021-33631
CWE-190 Low
No
No
9.3.0.20, 9.3.5.2 19.02.2024 SB2024021921
SB2024021925
SB2024021926
and 34 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
9.3.0.17, 9.3.5.1 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
9.3.0.17, 9.3.5.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159
CWE-601 Low
No
No
9.3.0.16, 9.3.5 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU85352 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-46177
CWE-22 Medium
No
No
9.3.0.15, 9.3.4.1 15.01.2024 SB2024011501
SB2024011520
#VU85021 - Out-of-bounds write
CVE-2023-6931
CWE-787 Low
No
No
9.3.0.20, 9.3.5.2 05.01.2024 SB2024010524
SB2024011643
SB2024011644
and 99 more
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
9.3.0.15, 9.3.4.1 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
9.3.0.17, 9.3.5.1 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
9.3.0.15, 9.3.4.1 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
9.3.0.15, 9.3.4.1 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116
CWE-1333 Medium
No
No
9.3.0.0 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU81699 - Inefficient Regular Expression Complexity
CVE-2023-26118
CWE-1333 Medium
No
No
9.3.0.0 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
9.3.0.15, 9.3.4.1 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU79318 - Inefficient Regular Expression Complexity
CVE-2023-26117
CWE-1333 Medium
No
No
9.3.0.0 10.08.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU74628 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28466
CWE-362 Low
No
No
9.3.0.17, 9.3.5.1 10.04.2023 SB2023041032
SB2023041040
SB2023041041
and 79 more


Showing elements 41 - 60 out of 104