Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:lts:*:*:*

part: a version: 9.3.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36128 vulnerable 2026-06-08 07:21:01.112564 IBM MQ denial of service
HIGH (7.5)
IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.
Published: 2025-10-16T16:49:26.251Z
Updated: 2025-10-16T18:13:32.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36100 vulnerable 2026-06-08 07:21:00.968656 IBM MQ information disclosure
MEDIUM (5.1)
IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.
Published: 2025-09-07T00:37:00.421Z
Updated: 2025-10-09T16:22:51.045Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.