IBM Mq 8.0.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs

CVE-2020-4682

IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.

Published 2021-01-28 · Modified

10.0EPSS 0.078

CVE-2022-22489

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.

Published 2022-08-19 · Modified

9.1EPSS 0.017

CVE-2021-38875

IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398.

Published 2021-11-23 · Modified

6.5EPSS 0.010

CVE-2022-31772

IBM MQ denial of service

Published 2022-11-11 · Modified

6.5EPSS 0.008

CVE-2023-28514

IBM MQ information disclosure

Published 2023-05-19 · Modified

6.2EPSS 0.002

CVE-2023-28950

IBM MQ information disclosure