Known vulnerabilities in IBM MQ Operator - page 13

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Operator IBM MQ Operator is affected by 293 known vulnerabilities: 2 critical, 33 high, 186 medium, 72 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68376 - Integer overflow
CVE-2022-3515
CWE-190 High
No
No
- 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67532 - Use After Free
CVE-2022-40674
CWE-416 High
No
No
- 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU67412 - Out-of-bounds read
CVE-2020-35527
CWE-125 Medium
No
No
- 15.09.2022 SB2020080601
SB2022091540
SB2022102543
and 29 more
#VU67411 - NULL Pointer Dereference
CVE-2020-35525
CWE-476 Medium
No
No
- 15.09.2022 SB2020080601
SB2022091540
SB2022092902
and 30 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434
CWE-122 High
Available
No
- 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
- 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
1.3.7, 2.0.2 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU65915 - Double Free
CVE-2022-2509
CWE-415 High
No
No
- 02.08.2022 SB2022080207
SB2022080208
SB2022080509
and 54 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476
CWE-290 Medium
No
No
2.0.4, 2.1.0 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903
CWE-347 Medium
No
No
2.0.4, 2.1.0 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
1.3.7, 2.0.2 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
1.3.7, 2.0.2 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU61295 - Memory corruption
CVE-2022-23219
CWE-119 High
No
No
1.3.3, 1.8.0 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU61294 - Memory corruption
CVE-2022-23218
CWE-119 High
No
No
1.3.3, 1.8.0 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU61293 - Off-by-one Error
CVE-2021-3999
CWE-193 High
No
No
1.3.3, 1.8.0 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648
CWE-264 Medium
Available
No
2.0.4, 2.1.0 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 30 more
#VU59993 - Improper Verification of Cryptographic Signature
CVE-2021-3521
CWE-347 Medium
No
No
1.3.3, 1.8.0 25.01.2022 SB2022012518
SB2022012519
SB2022020935
and 23 more
#VU59970 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2021-39031
CWE-90 Medium
No
No
1.3.3, 1.8.0 25.01.2022 SB2022012506
SB2022032317
SB2022041207
and 12 more
#VU53399 - Security Features
CVE-2021-30465
CWE-254 Low
No
No
2.0.4, 2.1.0 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 33 more
#VU22482 - Permissions, Privileges, and Access Controls
CVE-2019-16884
CWE-264 Low
No
No
2.0.4, 2.1.0 01.11.2019 SB2019092516
SB2019092517
SB2019110111
and 19 more


Showing elements 241 - 260 out of 293