Ibm

Mq Appliance

47 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-3631

  • EPSS 0.05%
  • Veröffentlicht 11.07.2025 18:37:38
  • Zuletzt bearbeitet 23.07.2025 19:08:03

An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.

6.5

CVE-2025-23225

  • EPSS 0.12%
  • Veröffentlicht 28.02.2025 03:15:10
  • Zuletzt bearbeitet 03.07.2025 20:25:35

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

8.8

CVE-2025-0975

  • EPSS 0.24%
  • Veröffentlicht 28.02.2025 03:15:10
  • Zuletzt bearbeitet 03.07.2025 20:41:35

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.

4.7

CVE-2024-54173

  • EPSS 0.01%
  • Veröffentlicht 28.02.2025 03:15:09
  • Zuletzt bearbeitet 03.07.2025 20:44:08

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

5.3

CVE-2024-51471

  • EPSS 0.07%
  • Veröffentlicht 19.12.2024 18:15:23
  • Zuletzt bearbeitet 03.07.2025 20:23:41

IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.

6.5

CVE-2024-51470

  • EPSS 0.1%
  • Veröffentlicht 18.12.2024 20:15:23
  • Zuletzt bearbeitet 15.08.2025 18:30:37

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set...

7.5

CVE-2024-25048

  • EPSS 0.77%
  • Veröffentlicht 27.04.2024 12:15:10
  • Zuletzt bearbeitet 03.07.2025 20:45:20

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-...

7.5

CVE-2024-25016

  • EPSS 0.09%
  • Veröffentlicht 03.03.2024 04:15:06
  • Zuletzt bearbeitet 12.05.2025 21:08:23

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

7.5

CVE-2023-46177

  • EPSS 0.05%
  • Veröffentlicht 18.12.2023 15:15:08
  • Zuletzt bearbeitet 21.11.2024 08:28:01

IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.

7.8

CVE-2023-46176

  • EPSS 0.02%
  • Veröffentlicht 03.11.2023 01:15:08
  • Zuletzt bearbeitet 21.11.2024 08:28:01

IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. IBM X-Force ID: 269535.