Login Request a demo
MA
Product
MQ Appliance
by IBM · last CVE Sep 18, 2026
59
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 2High 18Medium 39Low 0
Severity
All severities59Critical2High18Medium39Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-10747
10.0
1%
Sep 18
IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
Affected: 9.4 LTS through 9.4.0.0 to 9.4.0.25; 9.4 CD through 9.4.1.0 to 9.4.5.2; 10.0.0.0 through 10.0.0.1 only
CVE-2020-4682
9.8
8%
Jan 28
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data
Affected: 9.2.0.0
CVE-2025-0975
8.8
1%
Feb 28
IBM MQ code execution
Affected: 9.3.0 through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10
CVE-2024-40681
8.8
0%
Sep 7
IBM MQ security bypass
Affected: 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD
CVE-2024-31912
8.8
0%
Jun 28
IBM MQ privilege escalation
Affected: 9.3 LTS and 9.3 CD
CVE-2020-4938
8.8
0%
Jul 12
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…
Affected: 9.1; 9.2
CVE-2017-1318
8.8
3%
Jul 18
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +3 more
CVE-2023-46176
7.8
0%
Nov 3
IBM MQ privilege escalation
Affected: 9.3 CD
CVE-2019-4620
7.8
0%
Jan 28
IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4294
7.8
1%
Aug 20
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could…
Affected: 8.0.0.0 through 8.0.0.12; 9.1.0.0 through 9.1.0.2; 9.1.1 through 9.1.2
CVE-2025-3631
7.5
0%
Jul 11
IBM MQ denial of service
Affected: 9.3.2.0 CD through 9.3.5.2 CD; 9.4.0.0 LTS through 9.4.0.11 LTS; 9.4.1.0 CD through 9.4.2.1 CD
CVE-2024-35116
7.5
1%
Jun 28
IBM MQ denial of service
Affected: 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD
CVE-2024-31919
7.5
0%
Jun 28
IBM MQ denial of service
Affected: 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD
CVE-2024-25048
7.5
1%
Apr 27
IBM MQ code execution
Affected: 9.3 LTS, 9.3 CD
CVE-2024-25016
7.5
1%
Mar 3
IBM MQ denial of service
Affected: 9.3.0.0 through 9.3.5.0
CVE-2023-46177
7.5
1%
Dec 18
IBM MQ Appliance information disclosure
Affected: 9.3 LTS, 9.3 CD
CVE-2023-28513
7.5
1%
Jul 19
IBM MQ denial of service
Affected: 9.2 LTS, 9.3 LTS, 9.2 CD, 9.2 LTS
CVE-2022-43902
7.5
1%
Mar 1
IBM MQ denial of service
Affected: 9.2.0.0 before 9.2.0.8; 9.2.0.0 before 9.2.5; 9.2.5; 9.2.5; 9.2.5; 9.2.5; +3 more
CVE-2020-4375
7.5
2%
Jul 28
IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a…
Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2019-4055
7.5
2%
Apr 19
IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function
Affected: 8.0.0.0 through 8.0.0.10; 9.1.0 through 9.1.1; 9.1.0.0 through 9.1.0.1
CVE-2021-38967
6.7
0%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code
Affected: 9.2.0.0; 9.2.1; 9.2.0.1; 9.2.2; 9.2.0.2; 9.2.0.3; +1 more
CVE-2025-23225
6.5
0%
Feb 28
IBM MQ denial of service
Affected: through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10
CVE-2024-51470
6.5
1%
Dec 18
IBM MQ denial of service
Affected: 9.3 LTS, 9.3 CD, 9.4 LTS
CVE-2024-35156
6.5
1%
Jun 28
IBM MQ information disclosure
Affected: 9.3 LTS and 9.3 CD
CVE-2024-35155
6.5
1%
Jun 28
IBM MQ information disclosure
Affected: 9.3 LTS and 9.3 CD
CVE-2022-43919
6.5
1%
May 5
IBM MQ denial of service
Affected: 9.2.0.0 before 9.2.0.10; 9.2.0.0 before 9.2.5.7; 9.3.0.0 before 9.3.0.5; 9.3.0.0 before 9.3.2
CVE-2022-40230
6.5
0%
Nov 3
"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system
Affected: 9.2.0.0; 9.2.0.0; 9.3.0.0; 9.3.0.0
CVE-2022-22356
6.5
1%
Apr 5
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts
Affected: 9.2 LTS; 9.2 CD
CVE-2022-22316
6.5
1%
Mar 23
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks
Affected: 9.2 LTS; 9.2 CD
CVE-2021-29843
6.5
1%
Nov 8
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties
Affected: 9.1.LTS; 9.1.CD; 9.2.LTS; 9.2.CD
CVE-2020-4931
6.5
1%
Feb 24
IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages
Affected: 9.1.0.0; 9.1.0.1; 9.1.1; 9.1.0.2; 9.1.2; 9.1.0.3; +8 more
CVE-2020-4869
6.5
2%
Jan 11
IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow
Affected: 9.2.0.0; 9.2.1
CVE-2020-4592
6.5
1%
Nov 18
IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages
Affected: 9.1.0.0; 9.1.0.0
CVE-2020-4465
6.5
2%
Jul 28
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code
Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2020-4267
6.5
1%
Apr 24
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak
Affected: 9.1.0 before 9.1.5
CVE-2019-4656
6.5
1%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and…
Affected: 8.0.0.0 before 8.0.0.14
CVE-2019-4614
6.5
2%
Jan 28
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4560
6.5
1%
Dec 16
IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages
Affected: 8.0.0.0 before 8.0.0.13; 9.0.0.0 before 9.0.0.8; 9.1.0.0 before 9.1.0.4; 9.1.1 before 9.1.4
CVE-2025-14456
5.9
0%
Mar 3
IBM MQ Appliance uses weaker than expected cryptographic algorithms
Affected: 9.4 CD through 9.4.4.0 to 9.4.4.1
CVE-2023-26285
5.9
1%
May 5
IBM MQ denial of service
Affected: 9.2.0.0 before 9.2.0.11; 9.2.0.0 before 9.2.5.7; 9.3.0.0 before 9.3.0.5; 9.3.0.0 before 9.3.2.1
CVE-2019-4568
5.9
1%
Jan 28
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel
Affected: 8.0.0.0 before 8.0.0.14
CVE-2024-40680
5.5
0%
Sep 7
IBM MQ denial of service
Affected: 9.3 CD, 9.4 LTS, 9.4 CD
CVE-2023-22874
5.5
0%
May 5
IBM MQ denial of service
Affected: 9.2.0.0 before 9.3.2; 9.3.0.0 before 9.3.0.5
CVE-2022-22321
5.5
0%
Mar 1
IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection
Affected: 9.2 LTS; 9.2 CD
CVE-2021-39000
5.5
1%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics
Affected: 9.2.0.0; 9.2.1; 9.2.0.1; 9.2.2; 9.2.0.2; 9.2.0.3; +1 more
CVE-2021-38999
5.5
0%
Nov 30
IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace
Affected: 9.2.0.0; 9.2.1; 9.2.0.1; 9.2.2; 9.2.0.2; 9.2.0.3; +1 more
CVE-2021-38958
5.5
0%
Nov 30
IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue
Affected: 9.2.0.0; 9.2.1; 9.2.0.1; 9.2.2; 9.2.0.2; 9.2.0.3; +1 more
CVE-2019-4731
5.5
0%
Jul 28
IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace
Affected: 9.1.4
CVE-2019-4719
5.5
0%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras…
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4619
5.5
0%
Mar 16
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
Page 1 of 2 · 59 total
12