Ibm

Mq Appliance

47 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-3631

  • EPSS 0.05%
  • Published 11.07.2025 18:37:38
  • Last modified 23.07.2025 19:08:03

An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.

6.5

CVE-2025-23225

  • EPSS 0.12%
  • Published 28.02.2025 03:15:10
  • Last modified 03.07.2025 20:25:35

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

8.8

CVE-2025-0975

  • EPSS 0.24%
  • Published 28.02.2025 03:15:10
  • Last modified 03.07.2025 20:41:35

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.

4.7

CVE-2024-54173

  • EPSS 0.01%
  • Published 28.02.2025 03:15:09
  • Last modified 03.07.2025 20:44:08

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

5.3

CVE-2024-51471

  • EPSS 0.07%
  • Published 19.12.2024 18:15:23
  • Last modified 03.07.2025 20:23:41

IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.

6.5

CVE-2024-51470

  • EPSS 0.1%
  • Published 18.12.2024 20:15:23
  • Last modified 15.08.2025 18:30:37

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set...

7.5

CVE-2024-25048

  • EPSS 0.77%
  • Published 27.04.2024 12:15:10
  • Last modified 03.07.2025 20:45:20

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-...

7.5

CVE-2024-25016

  • EPSS 0.09%
  • Published 03.03.2024 04:15:06
  • Last modified 12.05.2025 21:08:23

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

7.5

CVE-2023-46177

  • EPSS 0.05%
  • Published 18.12.2023 15:15:08
  • Last modified 21.11.2024 08:28:01

IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.

7.8

CVE-2023-46176

  • EPSS 0.02%
  • Published 03.11.2023 01:15:08
  • Last modified 21.11.2024 08:28:01

IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. IBM X-Force ID: 269535.