Vulnerabilities > IBM > Websphere MQ > 7.1.0.3

DATE CVE VULNERABILITY TITLE RISK
2015-04-27 CVE-2015-0176 Cross-site Scripting vulnerability in IBM Websphere MQ
Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response.
network
ibm CWE-79
4.3
2015-02-13 CVE-2014-4771 Resource Management Errors vulnerability in IBM Websphere MQ
IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveraging PCF query privileges for a crafted query.
network
ibm CWE-399
3.5
2014-05-07 CVE-2014-0911 Unspecified vulnerability in IBM Websphere MQ
inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service (disk or CPU consumption) via unspecified vectors.
network
ibm
4.3