Vulnerabilities > IBM > MQ > 9.1.4
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-11-16 | CVE-2021-38949 | Cleartext Storage of Sensitive Information vulnerability in IBM MQ and Websphere MQ IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. | 5.5 |
| 2020-06-16 | CVE-2020-4320 | Improper Certificate Validation vulnerability in IBM MQ IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. | 6.5 |
| 2020-06-16 | CVE-2020-4310 | Unspecified vulnerability in IBM MQ and Websphere MQ IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. | 7.5 |
| 2020-04-16 | CVE-2020-4338 | Information Exposure vulnerability in IBM MQ IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. | 5.5 |
| 2020-04-16 | CVE-2019-4762 | Unspecified vulnerability in IBM MQ IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. | 7.5 |