VendorsIBMwebsphere_mq_internet_pass_thruall versions
Vulnerabilities

IBM Websphere MQ Internet Pass Thru (MQIPT) for Websphere MQ

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2013-5401
The command-port listener in IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x before 2.1.0.1 allows remote attackers to cause a denial of service (remote-administration outage) via unspecified vectors.
Published 2014-03-21 · Modified
5.0EPSS 0.012
CVE-2015-0173
The HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value.
Published 2015-06-28 · Modified
4.3EPSS 0.016