Vulnerabilidades do Ibm Mq
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Mq: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:ibm:mq
CVE-2026-11378
Alta · 8.8
CWE-190 18/09/2026
Integer Overflow or Wraparound em Ibm Mq
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
CVE-2026-11375
Alta · 8.8
CWE-122 18/09/2026
Heap-based Buffer Overflow em Ibm Mq
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
CVE-2026-10853
Alta · 8.8
CWE-470 18/09/2026
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of…
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.
CVE-2026-10575
Alta · 8.8
CWE-122 18/09/2026
Heap-based Buffer Overflow em Ibm Mq
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.
CVE-2026-10027
Crítica · 9.8
CWE-787 18/09/2026
Out-of-bounds Write em Ibm Mq
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.
CVE-2026-1713
Média · 5.0
CWE-305 03/03/2026
IBM MQ is affected by an authority vulnerablility
IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD
CVE-2025-36128
Alta · 7.5
CWE-772 16/10/2025
IBM MQ denial of service
IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.