Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

48 records in Mq Appliance · all components

TI-2020-03985 CVE-2020-4682 · GHSA-hmh7-p3j6-5g37

Deserialization of untrusted data in IBM MQ

Priority MEDIUM 52

IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07554 Published 2021-01-28 No fix listed CWE-502
TI-2017-01080 CVE-2017-1318 · GHSA-prwg-rgj2-8qfp

OS command injection in IBM MQ Appliance

Priority MEDIUM 44

IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03136 Published 2017-07-18 No fix listed CWE-78
TI-2025-00826 CVE-2025-0975 · GHSA-r2vw-h337-2gxm

IBM MQ code execution

Priority MEDIUM 41

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00679 Published 2025-02-28 No fix listed CWE-150
TI-2023-11446 CVE-2023-26285 · GHSA-p8v4-cwrw-r86g

IBM MQ denial of service

Priority MEDIUM 41

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00945 Published 2023-05-05 No fix listed CWE-119
TI-2020-04160 CVE-2020-4938 · GHSA-vvf5-hc5m-grm8

Cross-site request forgery in IBM MQ Appliance

Priority LOW 38

IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00397 Published 2021-07-12 No fix listed CWE-352
TI-2024-16522 CVE-2024-25048 · GHSA-9prh-5p33-rp37

IBM MQ code execution

Priority LOW 37

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.009 Published 2024-04-27 No fix listed CWE-122
TI-2023-24808 CVE-2023-46177 · GHSA-2h9m-7wj7-h654

IBM MQ Appliance information disclosure

Priority LOW 36

IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01338 Published 2023-12-18 No fix listed CWE-22
TI-2020-03761 CVE-2020-4375 · GHSA-3qwg-86mf-pw6m

Memory leak in IBM MQ Appliance

Priority LOW 36

IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a dynamic queue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0154 Published 2020-07-28 No fix listed CWE-401
TI-2019-03194 CVE-2019-4294 · GHSA-82vw-2gf8-mwfr

OS command injection in IBM MQ Appliance

Priority LOW 36

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00945 Published 2019-08-20 No fix listed CWE-78
TI-2023-24807 CVE-2023-46176 · GHSA-8jv2-3395-qjhf

IBM MQ privilege escalation

Priority LOW 35

IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00186 Published 2023-11-03 No fix listed CWE-424
TI-2023-13051 CVE-2023-28513 · GHSA-x45w-xc46-348w

IBM MQ denial of service

Priority LOW 35

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error proce…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-07-19 No fix listed CWE-20
TI-2024-16502 CVE-2024-25016 · GHSA-3vxq-68fw-q4hj

IBM MQ denial of service

Priority LOW 34

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00849 Published 2024-03-03 No fix listed CWE-20
TI-2022-21558 CVE-2022-43902 · GHSA-gmcv-4j6w-rhjx

IBM MQ denial of service

Priority LOW 34

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-03-01 No fix listed
TI-2019-03384 CVE-2019-4620 · GHSA-qwqq-r334-mqgx

Improper input validation in IBM MQ Appliance

Priority LOW 34

IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00353 Published 2020-01-28 No fix listed CWE-20
TI-2025-03198 CVE-2025-3631 · GHSA-mprx-jp8f-rw8w

IBM MQ denial of service

Priority LOW 33

An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00378 Published 2025-07-11 No fix listed CWE-416
TI-2020-04102 CVE-2020-4869 · GHSA-r6xm-wq7q-jr6c

Buffer overflow in IBM MQ Appliance

Priority LOW 33

IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01836 Published 2021-01-11 No fix listed CWE-120
TI-2020-03816 CVE-2020-4465 · GHSA-xr77-4rxw-6357

Buffer overflow in IBM MQ Appliance

Priority LOW 33

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01907 Published 2020-07-28 No fix listed CWE-120
TI-2019-03404 CVE-2019-4656 · GHSA-8vcg-h82j-6975

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to…

Priority LOW 32

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01436 Published 2020-03-16 No fix listed
TI-2020-03676 CVE-2020-4267 · GHSA-pvcg-m8c9-58wj

Memory leak in IBM MQ Appliance

Priority LOW 31

IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01295 Published 2020-04-24 No fix listed CWE-401
TI-2024-34392 CVE-2024-51470 · GHSA-2663-jm96-pp8f

IBM MQ denial of service

Priority LOW 30

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00696 Published 2024-12-18 No fix listed CWE-754
Load more
Open these records in search →