Ibm

Mq

76 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-31912

  • EPSS 0.42%
  • Veröffentlicht 28.06.2024 18:15:03
  • Zuletzt bearbeitet 21.11.2024 09:14:07

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. IBM X-Force ID: 289894.

7.5

CVE-2024-25015

  • EPSS 0.93%
  • Veröffentlicht 01.05.2024 17:15:29
  • Zuletzt bearbeitet 21.08.2025 15:15:50

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.

5.3

CVE-2023-45177

  • EPSS 0.6%
  • Veröffentlicht 20.03.2024 18:15:08
  • Zuletzt bearbeitet 03.07.2025 19:37:40

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within the MQ clustering logic. IBM X-Force ID: 268066.

7.5

CVE-2024-25016

  • EPSS 0.85%
  • Veröffentlicht 03.03.2024 04:15:06
  • Zuletzt bearbeitet 12.05.2025 21:08:23

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

7.5

CVE-2023-28513

  • EPSS 0.97%
  • Veröffentlicht 19.07.2023 02:15:09
  • Zuletzt bearbeitet 21.11.2024 07:55:15

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force I...

5.5

CVE-2023-28950

  • EPSS 0.18%
  • Veröffentlicht 19.05.2023 16:15:14
  • Zuletzt bearbeitet 21.11.2024 07:56:16

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

5.5

CVE-2023-28514

  • EPSS 0.19%
  • Veröffentlicht 19.05.2023 15:15:08
  • Zuletzt bearbeitet 21.11.2024 07:55:16

IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

3.3

CVE-2022-42436

  • EPSS 0.18%
  • Veröffentlicht 12.02.2023 04:15:15
  • Zuletzt bearbeitet 21.11.2024 07:24:58

IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.

6.5

CVE-2022-31772

  • EPSS 0.71%
  • Veröffentlicht 11.11.2022 19:15:10
  • Zuletzt bearbeitet 21.11.2024 07:05:17

IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.

9.1

CVE-2022-22489

  • EPSS 1.63%
  • Veröffentlicht 19.08.2022 19:15:07
  • Zuletzt bearbeitet 21.11.2024 06:46:53

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resou...