IBM MQ

• CVE-2024-35156 Medium 6.5 IBM MQ information disclosure 0.5%
• CVE-2024-35155 Medium 6.5 IBM MQ information disclosure 0.6%
• CVE-2024-31912 High 7.5 IBM MQ privilege escalation 0.4%
• CVE-2024-31919 Medium 5.9 IBM MQ denial of service 0.5%
• CVE-2024-25015 High 7.5 IBM MQ denial of service 0.9%
• CVE-2023-45177 Medium 5.3 IBM MQ denial of service 0.7%
• CVE-2024-25016 High 7.5 IBM MQ denial of service 0.8%
• CVE-2023-28513 Medium 5.9 IBM MQ denial of service 1.0%
• CVE-2023-28950 Medium 5.1 IBM MQ information disclosure 0.2%
• CVE-2023-28514 Medium 6.2 IBM MQ information disclosure 0.2%
• CVE-2023-26285 Medium 5.9 IBM MQ denial of service 0.9%
• CVE-2023-22874 Medium 5.5 IBM MQ denial of service 0.2%
• CVE-2022-43919 Medium 5.3 IBM MQ denial of service 0.7%
• CVE-2022-43902 Medium 6.5 IBM MQ denial of service 0.8%
• CVE-2022-42436 Medium 4.0 IBM MQ information disclosure 0.2%
• CVE-2022-31772 Medium 5.3 IBM MQ denial of service 0.8%
• CVE-2022-22489 High 8.2 IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to ex 1.8%
• CVE-2021-39034 Medium 5.3 IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964. 1.0%
• CVE-2021-38875 Medium 6.5 IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398. 1.0%
• CVE-2021-38949 Medium 6.2 IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403. 0.2%
• CVE-2020-4682 High 8.1 IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit thi 7.6%
• CVE-2020-4870 Medium 5.9 IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 190833. 1.7%
• CVE-2020-4320 Medium 5.3 IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403. 0.7%
• CVE-2020-4310 Medium 5.9 IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081. 1.6%
• CVE-2020-4338 Medium 5.1 IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937. 0.3%