IBM MQ Appliance 9.2.0.0 LTS Edition

CPE Details

IBM MQ Appliance 9.2.0.0 LTS Edition
ibm
mq_appliance
9.2.0.0
2021-01-12
14h34 +00:00
2021-01-12
14h34 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:lts:*:*:*

Informations

Vendor

ibm

Product

mq_appliance

Version

9.2.0.0

Software Edition

lts

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-28513 2023-07-19 01h49 +00:00 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
7.5
Haute
CVE-2023-26285 2023-05-05 15h16 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.
7.5
Haute
CVE-2022-43919 2023-05-05 14h24 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.
6.5
Moyen
CVE-2022-43902 2023-03-01 20h44 +00:00 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.
7.5
Haute
CVE-2022-40230 2022-11-02 23h00 +00:00 "IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."
6.5
Moyen
CVE-2022-22356 2022-04-05 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487.
6.5
Moyen
CVE-2022-22355 2022-04-05 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance.
5.3
Moyen
CVE-2022-22316 2022-03-23 16h20 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.
6.5
Moyen
CVE-2021-39000 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215.
5.5
Moyen
CVE-2021-38999 2021-11-30 16h45 +00:00 IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace.
5.5
Moyen
CVE-2021-38967 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441.
6.7
Moyen
CVE-2021-38958 2021-11-30 16h45 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042
5.5
Moyen
CVE-2021-29843 2021-11-08 16h50 +00:00 IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203.
6.5
Moyen
CVE-2020-4938 2021-07-12 16h05 +00:00 IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815.
8.8
Haute
CVE-2020-4682 2021-01-28 12h55 +00:00 IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.
9.8
Critique
CVE-2020-4869 2021-01-11 17h10 +00:00 IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a specially crafted SNMP query to cause the appliance to reload. IBM X-Force ID: 190831.
6.5
Moyen