Vulnerabilities > IBM > MQ Appliance > 9.2.0.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-05 CVE-2023-26285 Allocation of Resources Without Limits or Throttling vulnerability in IBM MQ Appliance
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data.
network
high complexity
ibm CWE-770
5.9
2023-05-05 CVE-2022-43919 Unspecified vulnerability in IBM MQ Appliance
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service.
network
low complexity
ibm
6.5
2023-05-05 CVE-2023-22874 Resource Exhaustion vulnerability in IBM MQ Appliance
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files.
local
low complexity
ibm CWE-400
5.5
2023-03-10 CVE-2022-43902 Unspecified vulnerability in IBM MQ Appliance
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages.
network
low complexity
ibm
7.5
2022-03-23 CVE-2022-22316 Unspecified vulnerability in IBM MQ Appliance
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks.
network
low complexity
ibm
6.5
2021-11-08 CVE-2021-29843 Unspecified vulnerability in IBM MQ Appliance
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties.
network
low complexity
ibm
6.5
2021-07-12 CVE-2020-4938 Cross-Site Request Forgery (CSRF) vulnerability in IBM MQ Appliance
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
network
low complexity
ibm CWE-352
8.8