Known vulnerabilities in IBM MQ Operator - page 5
Vendor:
IBM Corporation
Software:
IBM MQ Operator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
293
Public exploits:
19
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.0.0
3.2.26 SC2
4.0.1 SC2
2.0.29
3.9.0
3.2.21 SC2
3.8.1 CD
3.7.2
3.2.19
9.4.4.0-r3
3.2.16
9.4.3.1-r2
3.6.3
9.4.2.1-r2
3.2.12
3.5.3
9.3.0.20-r1
9.4.0.0-r2
2.0.24
3.2.2
1.3.3
1.8.0
9.4.1.0-r1
2.0.28
3.2.6
3.3.0
2.0.27
3.2.5
3.2.4
2.0.26
9.3.0.20-r2
2.0.25
2.0.23
2.0.22
2.0.14
2.0.5
2.0.21
2.0.20
2.0.19
2.0.18
2.0.17
2.0.15
2.0.16
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.4
2.0.3
2.0.2
2.0.1
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
9.4.0.0-r3
3.2.3
3.2.0
3.1.3
3.1.2
3.1.1
3.1.0
2.2.0
2.4.6
2.4.7
3.0.1
3.0.0
2.4.5
2.4.3
2.4.4
2.4.2
2.4.1
2.4.0
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.1.0
2.0.0
1.8.2
Vulnerabilities (293)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97306 - Incorrect Privilege Assignment CVE-2024-40681 |
CWE-266 | Low | 2.0.26, 3.2.4 | 16.09.2024 |
SB2024091615 SB2024091816 SB2024091817 and 2 more |
||
| #VU97305 - Allocation of Resources Without Limits or Throttling CVE-2024-40680 |
CWE-770 | Low | 2.0.26, 3.2.4 | 16.09.2024 |
SB2024091615 SB2024091625 SB2024091736 and 2 more |
||
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | 2.0.28, 3.2.6, 3.3.0, 9.4.1.0-r1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | 2.0.28, 3.2.6, 3.3.0, 9.4.1.0-r1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.0.28, 3.2.6, 3.3.0, 9.4.1.0-r1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU96744 - Type confusion CVE-2024-6119 |
CWE-843 | Medium | 2.0.28, 3.2.6, 3.3.0, 9.4.1.0-r1 | 03.09.2024 |
SB2024090364 SB2024090365 SB2024090384 and 99 more |
||
| #VU93443 - Externally-generated error message containing sensitive information CVE-2024-35156 |
CWE-211 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 27.06.2024 |
SB2024062746 SB2024070243 SB2024101431 and 1 more |
||
| #VU89351 - Insufficient Verification of Data Authenticity CVE-2024-34397 |
CWE-345 | Low | 2.0.27, 3.2.5 | 10.05.2024 |
SB2024051042 SB2024051043 SB2024051044 and 88 more |
||
| #VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30172 |
CWE-835 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 62 more |
||
| #VU88977 - Resource exhaustion CVE-2024-25026 |
CWE-400 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 24.04.2024 |
SB2024042458 SB2024042525 SB2024042626 and 68 more |
||
| #VU88802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-22354 |
CWE-611 | High | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2024 |
SB2024041812 SB2024042628 SB2024050920 and 66 more |
||
| #VU88665 - Improper input validation CVE-2024-21085 |
CWE-20 | Low | 9.3.0.20-r1, 9.4.0.0-r2 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041796 and 125 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU88136 - Resource exhaustion CVE-2024-27268 |
CWE-400 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 04.04.2024 |
SB2024040437 SB2024050803 SB2024052003 and 40 more |
||
| #VU88123 - Resource exhaustion CVE-2024-22353 |
CWE-400 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 04.04.2024 |
SB2024040423 SB2024050220 SB2024050801 and 31 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 2.0.27, 3.2.5 | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU81042 - Memory corruption CVE-2023-41993 |
CWE-119 | Critical | 9.3.0.20-r1, 9.4.0.0-r2 | 21.09.2023 |
SB2023092140 SB2023092141 SB2023092142 and 24 more |
||
| #VU75265 - Improper input validation CVE-2023-21938 |
CWE-20 | Low | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 181 more |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU75262 - Improper input validation CVE-2023-21954 |
CWE-20 | Medium | 9.3.0.20-r1, 9.4.0.0-r2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 166 more |
Showing elements 81 - 100 out of 293