Login Request a demo
MA
Product
MQ Appliance
by IBM · last CVE Sep 18, 2026
56
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities56In the news0Timeline
Severity mix
Critical 2High 18Medium 36Low 0
Severity
All severities56Critical2High18Medium36Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-0975
8.8
1%
Feb 28
IBM MQ code execution
Affected: 9.3.0 through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10
CVE-2024-40681
8.8
0%
Sep 7
IBM MQ security bypass
Affected: 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD
CVE-2024-31912
8.8
0%
Jun 28
IBM MQ privilege escalation
Affected: 9.3 LTS and 9.3 CD
CVE-2020-4938
8.8
0%
Jul 12
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…
Affected: 9.1 before 9.2.2; 9.1.0.0 before 9.1.0.8; 9.2.0.0 before 9.2.0.2
CVE-2017-1318
8.8
3%
Jul 18
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +3 more
CVE-2023-46176
7.8
0%
Nov 3
IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys
Affected: 9.3.0.0
CVE-2019-4620
7.8
0%
Jan 28
IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables
Affected: 8.0.0.0 before 8.0.0.14; 9.1.0 before 9.1.4; 9.1.0.0 before 9.1.0.4
CVE-2019-4294
7.8
1%
Aug 20
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could…
Affected: 8.0.0.0 through 8.0.0.12; 9.1.0.0 through 9.1.0.2; 9.1.1 through 9.1.2
CVE-2025-3631
7.5
0%
Jul 11
IBM MQ denial of service
Affected: 9.3.2.0 CD through 9.3.5.2 CD; 9.4.0.0 LTS through 9.4.0.11 LTS; 9.4.1.0 CD through 9.4.2.1 CD
CVE-2024-35116
7.5
1%
Jun 28
IBM MQ denial of service
Affected: 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD
CVE-2024-31919
7.5
0%
Jun 28
IBM MQ denial of service
Affected: 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD
CVE-2024-25048
7.5
1%
Apr 27
IBM MQ code execution
Affected: 9.3 LTS, 9.3 CD
CVE-2024-25016
7.5
1%
Mar 3
IBM MQ denial of service
Affected: 9.3.0.0 through 9.3.5.0
CVE-2023-46177
7.5
1%
Dec 18
IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system
Affected: 9.3.0.0; 9.3.0.0
CVE-2023-28513
7.5
1%
Jul 19
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial…
Affected: 9.2.0.0; 9.2.0.0; 9.3.0.0; 9.3.0.0
CVE-2022-43902
7.5
1%
Mar 10
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages
Affected: 9.2.0.0 before 9.2.0.8; 9.2.0.0 before 9.2.5; 9.2.5; 9.2.5; 9.2.5; 9.2.5; +3 more
CVE-2020-4375
7.5
2%
Jul 28
IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a…
Affected: 8.0 before 8.0.0.15; 9.1.0.0 before 9.1.0.6; 9.1.0.0 before 9.2.0.0
CVE-2019-4055
7.5
2%
Apr 19
IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function
Affected: 8.0.0.0 through 8.0.0.10; 9.1.0 through 9.1.1; 9.1.0.0 through 9.1.0.1
Showing 18