Ibm

Mq

76 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.7

CVE-2024-54173

  • EPSS 0.13%
  • Veröffentlicht 28.02.2025 03:15:09
  • Zuletzt bearbeitet 03.07.2025 20:44:08

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

6.2

CVE-2024-52898

  • EPSS 0.18%
  • Veröffentlicht 14.01.2025 17:15:17
  • Zuletzt bearbeitet 03.07.2025 20:10:10

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when a detailed technical error message is returned.

6.2

CVE-2024-52897

  • EPSS 0.21%
  • Veröffentlicht 19.12.2024 18:15:23
  • Zuletzt bearbeitet 19.08.2025 21:31:25

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

6.2

CVE-2024-52896

  • EPSS 0.28%
  • Veröffentlicht 19.12.2024 17:15:09
  • Zuletzt bearbeitet 19.08.2025 21:31:33

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

6.5

CVE-2024-51470

  • EPSS 0.67%
  • Veröffentlicht 18.12.2024 20:15:23
  • Zuletzt bearbeitet 15.08.2025 18:30:37

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set...

8.8

CVE-2024-40681

  • EPSS 0.48%
  • Veröffentlicht 07.09.2024 15:15:10
  • Zuletzt bearbeitet 15.08.2025 14:21:47

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.

6.5

CVE-2024-35156

  • EPSS 0.53%
  • Veröffentlicht 28.06.2024 19:15:05
  • Zuletzt bearbeitet 21.11.2024 09:19:50

IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 29276...

7.5

CVE-2024-35116

  • EPSS 0.7%
  • Veröffentlicht 28.06.2024 19:15:05
  • Zuletzt bearbeitet 21.11.2024 09:19:48

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335.

6.5

CVE-2024-35155

  • EPSS 0.6%
  • Veröffentlicht 28.06.2024 18:15:04
  • Zuletzt bearbeitet 21.11.2024 09:19:50

IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. ...

7.5

CVE-2024-31919

  • EPSS 0.49%
  • Veröffentlicht 28.06.2024 18:15:03
  • Zuletzt bearbeitet 21.11.2024 09:14:07

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used. IBM X-Force ID: 290259.