IBM WebSphere MQ vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20185
3. 20202

Newest CVEs

• CVE-2020-4310

  IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion…

  IBM · WebSphere MQ

  Medium5.9
• CVE-2012-4863

  IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability

  IBM · WebSphere MQ

  Medium6.5
• CVE-2018-1551

  IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator…

  IBM · WebSphere MQ

  Low3.1
• CVE-2018-1503

  IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer…

  IBM · WebSphere MQ

  Medium4.3
• CVE-2017-1795

  IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed…

  IBM · WebSphere MQ

  Medium4.4
• CVE-2018-1374

  An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) client connecting to a…

  IBM · WebSphere MQ

  Medium5.3
• CVE-2018-1388

  GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212.

  IBM · WebSphere MQ

  High7.5
• CVE-2017-1118

  IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configured security policy.…

  IBM · WebSphere MQ

  High7.5