WM
Product
WebSphere MQ
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 1
Watch
Add WebSphere MQ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0360 | 9.8 | Feb 15 | IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary… Affected: 7.0.1; 7.1; 7.5; 8.0; 9.0 |
| CVE-2017-1145 | 8.6 | Mar 20 | IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource… Affected: 8.0.0.6 |
| CVE-2016-8971 | 6.5 | Mar 7 | IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume… Affected: 5.1; 5.3; 6.0; 7.0; 5.30.0; 6.0.1.0; +34 more |
| CVE-2016-8915 | 6.5 | Feb 22 | IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process Affected: 8.0 |
| CVE-2016-8986 | 6.5 | Feb 22 | IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests Affected: 8.0 |
| CVE-2016-3013 | 6.5 | Feb 22 | IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling Affected: 8.0 |
| CVE-2016-3052 | 5.9 | Feb 22 | Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network Affected: 8.0 |
| CVE-2016-9009 | 3.1 | Feb 24 | IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering Affected: 8.0 |
Showing 8