Ibm

Mq For Hpe Nonstop

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2026-11727

  • EPSS 0.61%
  • Veröffentlicht 18.09.2026 19:17:40
  • Zuletzt bearbeitet 22.09.2026 19:32:25

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when requesting AMS policy data.

8.1

CVE-2026-11726

  • EPSS 0.46%
  • Veröffentlicht 18.09.2026 19:15:41
  • Zuletzt bearbeitet 22.09.2026 19:32:25

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values.

7.5

CVE-2026-11716

  • EPSS 0.45%
  • Veröffentlicht 18.09.2026 19:09:46
  • Zuletzt bearbeitet 22.09.2026 19:32:25

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data.

9.9

CVE-2026-10858

  • EPSS 0.33%
  • Veröffentlicht 18.09.2026 16:17:05
  • Zuletzt bearbeitet 19.09.2026 04:17:51

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.

8.8

CVE-2026-11381

  • EPSS 0.59%
  • Veröffentlicht 18.09.2026 16:17:05
  • Zuletzt bearbeitet 19.09.2026 04:17:53

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures.

7.5

CVE-2026-10744

  • EPSS 0.27%
  • Veröffentlicht 18.09.2026 15:54:20
  • Zuletzt bearbeitet 19.09.2026 04:17:50

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.

6.5

CVE-2024-51470

  • EPSS 0.67%
  • Veröffentlicht 18.12.2024 20:15:23
  • Zuletzt bearbeitet 15.08.2025 18:30:37

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set...

7.5

CVE-2022-40237

  • EPSS 0.66%
  • Veröffentlicht 27.02.2023 15:15:11
  • Zuletzt bearbeitet 21.11.2024 07:21:07

IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.

5.5

CVE-2022-22325

  • EPSS 0.22%
  • Veröffentlicht 13.05.2022 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:46:38

IBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853.

7.8

CVE-2021-38950

  • EPSS 0.23%
  • Veröffentlicht 14.12.2021 17:15:06
  • Zuletzt bearbeitet 21.11.2024 06:18:16

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.