Known vulnerabilities in IBM MQ Operator - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Operator IBM MQ Operator is affected by 293 known vulnerabilities: 2 critical, 33 high, 186 medium, 72 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134285 - Improper input validation
CVE-2026-42770
CWE-20 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 19 more
#VU130954 - Out-of-bounds read
CVE-2026-6918
CWE-125 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 11.05.2026 SB2026051152
SB20260528261
SB2026060168
and 10 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
3.2.26 SC2, 4.0.1 SC2 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
3.2.26 SC2, 4.0.1 SC2 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU122514 - Improper Output Neutralization for Logs
CVE-2025-12755
CWE-117 Low
No
No
3.9.0 10.02.2026 SB2026021013
#VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-45582
CWE-22 Low
No
No
3.9.0 23.12.2025 SB2025122320
SB2025122321
SB2026010502
and 19 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
3.9.0 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118188 - Allocation of Resources Without Limits or Throttling
CVE-2025-58186
CWE-770 Medium
No
No
3.9.0 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 19 more
#VU118179 - Resource exhaustion
CVE-2025-61725
CWE-400 Medium
No
No
3.9.0 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 76 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
3.2.21 SC2, 3.8.1 CD 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
3.2.21 SC2, 3.8.1 CD 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000
CWE-79 Low
No
No
3.2.19, 3.7.2, 9.4.4.0-r3 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047
CWE-770 Medium
No
No
3.2.19, 3.7.2, 9.4.4.0-r3 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
3.2.19, 3.7.2, 9.4.4.0-r3 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714
CWE-674 Medium
No
No
3.9.0 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 35 more
#VU114769 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-8941
CWE-59 Low
No
No
3.2.16, 3.6.3, 9.4.3.1-r2 03.09.2025 SB2025090350
SB2025090372
SB2025090373
and 20 more
#VU113085 - Interpretation Conflict
CVE-2024-56339
CWE-436 Medium
No
No
3.2.19, 3.7.2, 9.4.4.0-r3 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
3.2.19, 3.7.2, 9.4.4.0-r3 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874
CWE-693 Low
No
No
3.2.16, 3.6.3, 9.4.3.1-r2 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 16 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732
CWE-330 Medium
No
No
3.2.19, 3.7.2, 9.4.4.0-r3 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more


Showing elements 41 - 60 out of 293