Skip to content
OpenAdvisories

Product · IBM

MQ Appliance

36 known vulnerabilities.

MQ Appliance at a glance

Last 12 months
3
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202600
Sep 202611
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202420

Latest advisories

  • High max 9.8
    NCSC-2026-0392 11 CVEs

    Kwetsbaarheden verholpen in IBM Langflow OSS en IBM MQ Appliance

    IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS.

    IBM
  • Medium max 5.9
    WID-SEC-2023-1591 1 CVE rev. 4

    IBM MQ: Schwachstelle ermöglicht Denial of Service

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM MQ ausnutzen, um einen Denial of Service Angriff durchzuführen.

    IBM Linux Windows
    first Jun 28, 2023
  • Medium
    WID-SEC-2022-0232 2 CVEs rev. 27

    Linux Kernel: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

    Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen.

    Oracle IBM Red Hat SUSE Broadcom Linux
    first Dec 26, 2021
  • High
    WID-SEC-2022-0501 1 CVE rev. 26

    Linux Kernel: Schwachstelle ermöglicht Denial of Service

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

    Oracle IBM Red Hat Dell SUSE Linux
    first Jun 28, 2022
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Medium 5.4
    CVE-2026-12538

    IBM MQ Appliance is affected by an improper validation vulnerability

    IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.

    IBM MQ Appliance
  • Critical 10.0
    CVE-2026-10747

    IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing

    IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication.

    IBM MQ Appliance
  • Medium 5.9
    CVE-2025-14456

    IBM MQ Appliance uses weaker than expected cryptographic algorithms

    IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1

    IBM MQ Appliance
  • Medium 6.5
    CVE-2025-3631

    IBM MQ denial of service

    An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.

    IBM MQ MQ Appliance
  • Medium 5.3
    CVE-2024-51471

    IBM MQ Appliance denial of service

    IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.

    IBM MQ Appliance
  • Medium 6.5
    CVE-2024-51470

    IBM MQ denial of service

    IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

    IBM MQ MQ Appliance MQ for HPE NonStop
  • High 7.5
    CVE-2024-25048

    IBM MQ code execution

    IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: …

    IBM MQ Appliance
  • Medium 6.5
    CVE-2023-46177

    IBM MQ Appliance information disclosure

    IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.

    IBM MQ Appliance
  • Medium 6.7
    CVE-2023-46176

    IBM MQ privilege escalation

    IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. IBM X-Force ID: 269535.

    IBM MQ Appliance
  • Medium 5.9
    CVE-2023-28513

    IBM MQ denial of service

    IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.

    IBM MQ MQ Appliance
  • Medium 5.3
    CVE-2022-22356

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discr…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2022-22355

    IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application whi…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2022-22316

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due t…

    IBM MQ Appliance
  • Medium 5.1
    CVE-2022-22321

    IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protec…

    IBM MQ Appliance
  • Medium 5.6
    CVE-2021-38986

    IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to…

    IBM MQ Appliance
  • Medium 5.9
    CVE-2021-39000

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensit…

    IBM MQ Appliance
  • Medium 5.1
    CVE-2021-38999

    IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within tra…

    IBM MQ Appliance
  • High 8.2
    CVE-2021-38967

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-For…

    IBM MQ Appliance
  • Medium 5.1
    CVE-2021-38958

    IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Forc…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2021-29843

    IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing me…

    IBM MQ Appliance
  • Medium 4.3
    CVE-2020-4938

    IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malic…

    IBM MQ Appliance
  • Medium 6.5
    CVE-2020-4931

    IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2020-4869

    IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacke…

    IBM MQ Appliance
  • Medium 5.9
    CVE-2020-4870

    IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting application…

    IBM MQ MQ Appliance
  • Medium 5.3
    CVE-2020-4592

    IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corru…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2020-4465

    IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulner…

    IBM MQ Appliance
  • Medium 5.9
    CVE-2020-4375

    IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of …

    IBM MQ Appliance
  • Low 3.1
    CVE-2020-4319

    IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, …

    IBM MQ Appliance
  • Medium 5.1
    CVE-2019-4731

    IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive…

    IBM MQ Appliance
  • Medium 4.1
    CVE-2020-4498

    IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to in…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2020-4267

    IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a m…

    IBM MQ Appliance
  • High 8.4
    CVE-2019-4620

    IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper valida…

    IBM MQ Appliance
  • High 8.4
    CVE-2019-4294

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.…

    IBM MQ Appliance DataPower Gateway
  • Medium 6.2
    CVE-2018-1652

    IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5…

    IBM MQ Appliance DataPower Gateways
  • Medium 5.4
    CVE-2018-1429

    IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users …

    IBM MQ Appliance
  • Unscored —
    CVE-2017-1318

    IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the …

    IBM MQ Appliance