Known vulnerabilities in IBM MQ Operator - page 4
Vendor:
IBM Corporation
Software:
IBM MQ Operator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
293
Public exploits:
19
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.0.0
3.2.26 SC2
4.0.1 SC2
2.0.29
3.9.0
3.2.21 SC2
3.8.1 CD
3.7.2
3.2.19
9.4.4.0-r3
3.2.16
9.4.3.1-r2
3.6.3
9.4.2.1-r2
3.2.12
3.5.3
9.3.0.20-r1
9.4.0.0-r2
2.0.24
3.2.2
1.3.3
1.8.0
9.4.1.0-r1
2.0.28
3.2.6
3.3.0
2.0.27
3.2.5
3.2.4
2.0.26
9.3.0.20-r2
2.0.25
2.0.23
2.0.22
2.0.14
2.0.5
2.0.21
2.0.20
2.0.19
2.0.18
2.0.17
2.0.15
2.0.16
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.4
2.0.3
2.0.2
2.0.1
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
9.4.0.0-r3
3.2.3
3.2.0
3.1.3
3.1.2
3.1.1
3.1.0
2.2.0
2.4.6
2.4.7
3.0.1
3.0.0
2.4.5
2.4.3
2.4.4
2.4.2
2.4.1
2.4.0
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.1.0
2.0.0
1.8.2
Vulnerabilities (293)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU111389 - Improper Access Control CVE-2025-6020 |
CWE-284 | Low | 3.2.16, 3.6.3, 9.4.3.1-r2 | 19.06.2025 |
SB2025061987 SB2025061992 SB20250619103 and 69 more |
||
| #VU109596 - Uncontrolled Memory Allocation CVE-2024-39743 |
CWE-789 | High | 9.3.0.20-r1, 9.4.0.0-r2 | 21.05.2025 |
SB20250521111 |
||
| #VU109594 - Incorrect Comparison CVE-2024-39742 |
CWE-697 | Critical | 9.3.0.20-r1, 9.4.0.0-r2 | 21.05.2025 |
SB20250521111 |
||
| #VU106253 - Improper input validation CVE-2025-22870 |
CWE-20 | Medium | 3.2.12, 3.5.3, 9.4.2.1-r2 | 30.03.2025 |
SB2025033001 SB2025033002 SB2025033003 and 106 more |
||
| #VU105459 - Resource exhaustion CVE-2025-22869 |
CWE-400 | Low | 3.2.12, 3.5.3, 9.4.2.1-r2 | 10.03.2025 |
SB2025031011 SB2025031015 SB2025032557 and 108 more |
||
| #VU103932 - Missing release of memory after effective lifetime CVE-2025-22866 |
CWE-401 | Low | 3.2.12, 3.5.3, 9.4.2.1-r2 | 12.02.2025 |
SB20250212100 SB20250212101 SB20250212102 and 27 more |
||
| #VU103687 - Memory corruption CVE-2025-0395 |
CWE-119 | Medium | 3.2.12, 3.5.3, 9.4.2.1-r2 | 06.02.2025 |
SB2025020664 SB2025020667 SB2025020668 and 66 more |
||
| #VU103457 - Improper input validation CVE-2024-45341 |
CWE-20 | Low | 3.2.12, 3.5.3, 9.4.2.1-r2 | 30.01.2025 |
SB2025013039 SB2025013043 SB2025013044 and 23 more |
||
| #VU103455 - Exposure of sensitive information to an unauthorized actor CVE-2024-45336 |
CWE-200 | Low | 3.2.12, 3.5.3, 9.4.2.1-r2 | 30.01.2025 |
SB2025013039 SB2025013043 SB2025013044 and 38 more |
||
| #VU93445 - Externally-generated error message containing sensitive information CVE-2024-35155 |
CWE-211 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 27.06.2024 |
SB2024062746 SB2024070243 SB2024101431 and 1 more |
||
| #VU93444 - Error Handling CVE-2024-31919 |
CWE-388 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 27.06.2024 |
SB2024062746 SB2024070243 SB2024100219 and 3 more |
||
| #VU93442 - Error Handling CVE-2024-35116 |
CWE-388 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 27.06.2024 |
SB2024062746 SB2024062747 SB2024070243 and 5 more |
||
| #VU93441 - Permissions, Privileges, and Access Controls CVE-2024-31912 |
CWE-264 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 27.06.2024 |
SB2024062746 SB2024070243 SB2024100219 and 2 more |
||
| #VU89221 - Insufficient Verification of Data Authenticity CVE-2024-34447 |
CWE-345 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 07.05.2024 |
SB2024050731 SB2024070445 SB2024071844 and 15 more |
||
| #VU89219 - Observable discrepancy CVE-2024-30171 |
CWE-203 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 07.05.2024 |
SB2024050731 SB2024050734 SB2024061019 and 59 more |
||
| #VU89218 - Resource exhaustion CVE-2024-29857 |
CWE-400 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 69 more |
||
| #VU88803 - Server-Side Request Forgery (SSRF) CVE-2024-22329 |
CWE-918 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2024 |
SB2024041812 SB2024042613 SB2024043016 and 67 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
Showing elements 61 - 80 out of 293