IBM MQ 9.2.0 Continuous Delivery Edition

CPE Details

IBM MQ 9.2.0 Continuous Delivery Edition
ibm
mq
9.2.0
2020-12-28
10h57 +00:00
2020-12-28
10h57 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:mq:9.2.0:*:*:*:continuous_delivery:*:*:*

Informations

Vendor

ibm

Product

mq

Version

9.2.0

Software Edition

continuous_delivery

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-28513 2023-07-19 01h49 +00:00 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
7.5
High
CVE-2023-28950 2023-05-19 15h20 +00:00 IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.
5.5
Medium
CVE-2022-42436 2023-02-08 19h28 +00:00 IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.
4
Medium
CVE-2022-31772 2022-11-11 18h56 +00:00 IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.
6.5
Medium
CVE-2022-22489 2022-08-19 18h50 +00:00 IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.
9.1
Critical
CVE-2022-22321 2022-03-01 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368.
5.5
Medium
CVE-2021-38986 2022-03-01 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.
5.4
Medium
CVE-2021-38875 2021-11-23 19h15 +00:00 IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398.
6.5
Medium
CVE-2020-4870 2020-12-21 17h50 +00:00 IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 190833.
7.5
High