IBM Corporation Websphere MQ vulnerabilities
8 vulnerabilities
Known vulnerabilities in IBM Corporation Websphere MQ, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-0360ibm corporationwebsphere mq+1
EPSS score2.81%
IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath. IBM Reference #: 1983457.CVE-2016-9009ibm corporationwebsphere mq+1EPSS score0.81%
IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647.CVE-2016-8915ibm corporationwebsphere mq+1EPSS score0.84%
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process. IBM Reference #: 1998649.CVE-2016-8971ibm corporationwebsphere mq+1EPSS score0.90%
IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663.CVE-2016-8986ibm corporationwebsphere mq+1EPSS score1.04%
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference #: 1998648.CVE-2016-3013ibm corporationwebsphere mq+1EPSS score0.91%
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference #: 1998661.CVE-2016-3052ibm corporationwebsphere mq+1EPSS score0.83%
Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the middle techniques.CVE-2017-1145ibm corporationwebsphere mq+1EPSS score1.91%
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672.