Known vulnerabilities in IBM MQ Operator - page 14

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Operator IBM MQ Operator is affected by 293 known vulnerabilities: 2 critical, 33 high, 186 medium, 72 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66757 - Use After Free
CVE-2022-2526
CWE-416 Medium
No
No
1.3.8, 2.0.3 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU66152 - Resource exhaustion
CVE-2021-46828
CWE-400 Medium
No
No
1.3.8, 2.0.3 07.08.2022 SB2022080701
SB2022080703
SB2022090161
and 20 more
#VU66070 - Resource exhaustion
CVE-2022-30633
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631
CWE-400 Medium
No
No
1.3.8, 2.0.3 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU65906 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22393
CWE-200 Low
No
No
1.3.6, 2.0.1 01.08.2022 SB2022080110
SB2022081039
SB2022081515
and 8 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
1.3.7, 2.0.2 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
1.3.8, 2.0.3 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
1.3.8, 2.0.3 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64266 - Buffer overflow
CVE-2022-24675
CWE-120 Low
No
No
1.3.6, 2.0.1 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU64197 - Improper Authentication
CVE-2022-22475
CWE-287 Low
No
No
1.3.6, 2.0.1 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526
CWE-264 Low
No
No
1.3.6, 2.0.1 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 65 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
1.3.7, 2.0.2 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
1.3.6, 2.0.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528
CWE-327 Medium
No
No
1.3.6, 2.0.1 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more


Showing elements 261 - 280 out of 293