Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.4.0:*:*:*:continuous_delivery:*:*:*

part: a version: 9.4.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software editioncontinuous_delivery
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36128 vulnerable 2026-06-08 07:21:01.112245 IBM MQ denial of service
HIGH (7.5)
IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.
Published: 2025-10-16T16:49:26.251Z
Updated: 2025-10-16T18:13:32.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23225 vulnerable 2026-06-08 07:10:55.376194 IBM MQ denial of service
MEDIUM (6.5)
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.
Published: 2025-02-28T02:23:30.753Z
Updated: 2025-02-28T16:34:10.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0985 vulnerable 2026-06-08 07:02:26.099847 IBM MQ information disclosure
MEDIUM (5.5)
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user.
Published: 2025-02-28T16:21:35.830Z
Updated: 2025-08-26T19:48:05.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0975 vulnerable 2026-06-08 07:02:26.085706 IBM MQ code execution
HIGH (8.8)
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.
Published: 2025-02-28T02:20:36.466Z
Updated: 2026-02-26T18:29:06.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54175 vulnerable 2026-06-08 06:54:16.149875 IBM MQ denial of service
MEDIUM (5.5)
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow a local user to cause a denial of service due to an improper check for unusual or exceptional conditions.
Published: 2025-02-28T16:19:56.817Z
Updated: 2025-08-27T21:43:05.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54173 vulnerable 2026-06-08 06:54:16.147552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52898 vulnerable 2026-06-08 06:52:16.365222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52897 vulnerable 2026-06-08 06:52:16.364574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52896 vulnerable 2026-06-08 06:52:16.360301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51470 vulnerable 2026-06-08 06:52:12.074549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.