Advisories · Technology

IBM MQ Appliance.

Every CVE that names IBM MQ Appliance among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12538 CVE record

CVSS 5.4 Medium

IBM MQ Appliance is affected by an improper validation vulnerability
- IBM MQ Appliance
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-10747 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
- IBM MQ Appliance
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2025-14456 CVE record

CVSS 5.9 Medium

IBM MQ Appliance uses weaker than expected cryptographic algorithms
- IBM MQ Appliance
- Weak cryptography or TLS
Not analysed yet 3 Mar 2026
CVE-2025-3631 CVE record

CVSS 6.5 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- Memory corruption
Not analysed yet 11 Jul 2025
CVE-2024-51471 CVE record

CVSS 5.3 Medium

IBM MQ Appliance denial of service
- IBM MQ Appliance
- Memory corruption
Not analysed yet 19 Dec 2024
CVE-2024-51470 CVE record

CVSS 6.5 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- CWE-754
Not analysed yet 18 Dec 2024
CVE-2024-25048 CVE record

CVSS 7.5 High

IBM MQ code execution
- IBM MQ Appliance
- Memory corruption
Not analysed yet 27 Apr 2024
CVE-2023-46177 CVE record

CVSS 6.5 Medium

IBM MQ Appliance information disclosure
- IBM MQ Appliance
- Path traversal
Not analysed yet 18 Dec 2023
CVE-2023-46176 CVE record

CVSS 6.7 Medium

IBM MQ privilege escalation
- IBM MQ Appliance
- CWE-424
Not analysed yet 3 Nov 2023
CVE-2023-28513 CVE record

CVSS 5.9 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- CWE-20
Not analysed yet 19 Jul 2023
CVE-2022-40230 CVE record

CVSS 6.5 Medium

Insufficient session expiration in IBM MQ Appliance
- IBM MQ Appliance
- Authentication bypass
Not analysed yet 3 Nov 2022
CVE-2022-22356 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account…
- IBM MQ Appliance
Not analysed yet 5 Apr 2022
CVE-2022-22355 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login…
- IBM MQ Appliance
Not analysed yet 5 Apr 2022
CVE-2022-22316 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to…
- IBM MQ Appliance
Not analysed yet 23 Mar 2022
CVE-2022-22321 CVE record

CVSS 5.1 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash…
- IBM MQ Appliance
Not analysed yet 1 Mar 2022
CVE-2021-38986 CVE record

CVSS 5.6 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could…
- IBM MQ Appliance
Not analysed yet 1 Mar 2022
CVE-2021-39000 CVE record

CVSS 5.9 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive…
- IBM MQ Appliance
Not analysed yet 30 Nov 2021
CVE-2021-38999 CVE record

CVSS 5.1 Medium

IBM MQ Appliance: IBM MQ Appliance could allow a local attacker to obtain sensitive information by…
- IBM MQ Appliance
Not analysed yet 30 Nov 2021
CVE-2021-38967 CVE record

CVSS 8.2 High

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and…
- IBM MQ Appliance
Not analysed yet 30 Nov 2021
CVE-2021-38958 CVE record

CVSS 5.1 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a…
- IBM MQ Appliance
Not analysed yet 30 Nov 2021
CVE-2021-29843 CVE record

CVSS 5.3 Medium

IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties.
- IBM MQ Appliance
Not analysed yet 8 Nov 2021
CVE-2020-4938 CVE record

CVSS 4.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could…
- IBM MQ Appliance
Not analysed yet 12 Jul 2021
CVE-2020-4931 CVE record

CVSS 6.5 Medium

IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages.
- IBM MQ Appliance
Not analysed yet 24 Feb 2021
CVE-2020-4869 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service…
- IBM MQ Appliance
Not analysed yet 11 Jan 2021
CVE-2020-4870 CVE record

CVSS 5.9 Medium

IBM MQ: IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error…
- IBM MQ
- IBM MQ Appliance
Not analysed yet 21 Dec 2020
CVE-2020-4592 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user…
- IBM MQ Appliance
Not analysed yet 18 Nov 2020
CVE-2020-4465 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD…
- IBM MQ Appliance
Not analysed yet 28 Jul 2020
CVE-2020-4375 CVE record

CVSS 5.9 Medium

IBM MQ Appliance: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD…
- IBM MQ Appliance
Not analysed yet 28 Jul 2020
CVE-2020-4319 CVE record

CVSS 3.1 Low

IBM MQ Appliance: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS…
- IBM MQ Appliance
Not analysed yet 28 Jul 2020
CVE-2019-4731 CVE record

CVSS 5.1 Medium

IBM MQ Appliance: IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive…
- IBM MQ Appliance
Not analysed yet 28 Jul 2020
CVE-2020-4498 CVE record

CVSS 4.1 Medium

IBM MQ Appliance: IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly…
- IBM MQ Appliance
Not analysed yet 27 Jul 2020
CVE-2020-4267 CVE record

CVSS 5.3 Medium

IBM MQ Appliance: IBM MQ and MQ Appliance 8.0, 9.1 LTS…
- IBM MQ Appliance
Not analysed yet 24 Apr 2020
CVE-2019-4620 CVE record

CVSS 8.4 High

IBM MQ Appliance: IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security…
- IBM MQ Appliance
Not analysed yet 28 Jan 2020
CVE-2019-4294 CVE record

CVSS 8.4 High

IBM MQ Appliance: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6…
- IBM MQ Appliance
- IBM DataPower Gateway
Not analysed yet 20 Aug 2019
CVE-2018-1652 CVE record

CVSS 6.2 Medium

IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance…
- IBM DataPower Gateways
- IBM MQ Appliance
Not analysed yet 11 Dec 2018
CVE-2018-1429 CVE record

CVSS 5.4 Medium

IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting.
- IBM MQ Appliance
Not analysed yet 23 Mar 2018
CVE-2017-1318 CVE record

IBM MQ Appliance: IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to…
- IBM MQ Appliance
Not analysed yet 18 Jul 2017