IBM MQ Appliance 9.2.0.0 LTS Edition

CPE Details

IBM MQ Appliance 9.2.0.0 LTS Edition
ibm
mq_appliance
9.2.0.0
2021-01-12
14h34 +00:00
2021-01-12
14h34 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:lts:*:*:*

Informations

Vendor

ibm

Product

mq_appliance

Version

9.2.0.0

Software Edition

lts

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-28513 2023-07-19 01h49 +00:00 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
7.5
High
CVE-2023-26285 2023-05-05 15h16 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.
7.5
High
CVE-2022-43919 2023-05-05 14h24 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.
6.5
Medium
CVE-2022-43902 2023-03-01 20h44 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.
7.5
High
CVE-2022-40230 2022-11-02 23h00 +00:00 "IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."
6.5
Medium
CVE-2022-22356 2022-04-05 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487.
6.5
Medium
CVE-2022-22355 2022-04-05 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance.
5.3
Medium
CVE-2022-22316 2022-03-23 16h20 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.
6.5
Medium
CVE-2021-39000 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215.
5.5
Medium
CVE-2021-38999 2021-11-30 16h45 +00:00 IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace.
5.5
Medium
CVE-2021-38967 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441.
6.7
Medium
CVE-2021-38958 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042
5.5
Medium
CVE-2021-29843 2021-11-08 16h50 +00:00 IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203.
6.5
Medium
CVE-2020-4938 2021-07-12 16h05 +00:00 IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815.
8.8
High
CVE-2020-4682 2021-01-28 12h55 +00:00 IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.
9.8
Critical
CVE-2020-4869 2021-01-11 17h10 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a specially crafted SNMP query to cause the appliance to reload. IBM X-Force ID: 190831.
6.5
Medium