Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

54 records in Mq · all components

TI-2020-03985 CVE-2020-4682 · GHSA-hmh7-p3j6-5g37

Deserialization of untrusted data in IBM MQ

Priority MEDIUM 52

IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07554 Published 2021-01-28 No fix listed CWE-502
TI-2026-08787 CVE-2026-10027 · GHSA-52gg-3863-7xg6

IBM MQ queue manager is vulnerable to unauthenticated remote code execution

Priority MEDIUM 44

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00793 Published 2026-09-18 No fix listed CWE-787
TI-2022-06772 CVE-2022-22489 · GHSA-4f9w-3c78-j5r7

XML external entity injection in IBM MQ

Priority MEDIUM 43

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01756 Published 2022-08-19 No fix listed CWE-611
TI-2026-09821 CVE-2026-11378 · GHSA-3qp5-vm6w-4rrg

IBM MQ queue manager is vulnerable to remote code execution

Priority MEDIUM 41

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00604 Published 2026-09-18 No fix listed CWE-190
TI-2026-09820 CVE-2026-11375 · GHSA-98w4-7mr5-93q9

IBM MQ queue manager is vulnerable to remote code execution

Priority MEDIUM 41

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00609 Published 2026-09-18 No fix listed CWE-122
TI-2026-09317 CVE-2026-10853 · GHSA-pwg9-6g7w-xg4q

IBM MQ queue manager is vulnerable to remote code execution

Priority MEDIUM 41

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00546 Published 2026-09-18 No fix listed CWE-470
TI-2026-09095 CVE-2026-10575 · GHSA-jpvh-h2h3-ch9p

IBM MQ queue manager is vulnerable to remote code execution

Priority MEDIUM 41

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00487 Published 2026-09-18 No fix listed CWE-122
TI-2024-16501 CVE-2024-25015 · GHSA-wgvj-j87f-295m

IBM MQ denial of service

Priority MEDIUM 41

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00925 Published 2024-05-01 No fix listed CWE-406
TI-2025-24711 CVE-2025-36128 · GHSA-w8pv-jfx7-7gp6

IBM MQ denial of service

Priority MEDIUM 40

IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2025-10-16 No fix listed CWE-772
TI-2024-21018 CVE-2024-31912 · GHSA-4qqh-789f-3w2h

IBM MQ privilege escalation

Priority MEDIUM 40

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00424 Published 2024-06-28 No fix listed CWE-266
TI-2023-13051 CVE-2023-28513 · GHSA-x45w-xc46-348w

IBM MQ denial of service

Priority LOW 35

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error proce…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-07-19 No fix listed CWE-20
TI-2024-23209 CVE-2024-35116 · GHSA-ph5p-wvqc-xxj8

IBM MQ denial of service

Priority LOW 34

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2024-06-28 No fix listed CWE-789
TI-2024-16502 CVE-2024-25016 · GHSA-3vxq-68fw-q4hj

IBM MQ denial of service

Priority LOW 34

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00849 Published 2024-03-03 No fix listed CWE-20
TI-2019-03152 CVE-2019-4227 · GHSA-xjxh-q8mg-f6v9

Session fixation in IBM MQ

Priority LOW 34

IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01113 Published 2019-10-04 No fix listed CWE-384
TI-2024-21022 CVE-2024-31919 · GHSA-8pf8-f3wp-vf64

IBM MQ denial of service

Priority LOW 33

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00492 Published 2024-06-28 No fix listed CWE-770
TI-2019-03404 CVE-2019-4656 · GHSA-8vcg-h82j-6975

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to…

Priority LOW 32

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01436 Published 2020-03-16 No fix listed
TI-2019-03236 CVE-2019-4378 · GHSA-mvwv-xww2-xj42

IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6…

Priority LOW 32

IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authenticated and authorize…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01379 Published 2019-09-26 No fix listed
Load more
Open these records in search →