Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq_appliance:9.3:*:*:*:lts:*:*:*

part: a version: 9.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq Appliance (3d4e405c-fb3b-50d7-8f20-6b403fdbccc6)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51471 vulnerable 2026-06-08 06:52:12.083017 IBM MQ Appliance denial of service
MEDIUM (5.3)
IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.
Published: 2024-12-19T17:11:02.223Z
Updated: 2024-12-20T17:55:19.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51470 vulnerable 2026-06-08 06:52:12.075432 IBM MQ denial of service
MEDIUM (6.5)
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
Published: 2024-12-18T19:56:10.377Z
Updated: 2024-12-18T20:24:38.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40681 vulnerable 2026-06-08 06:43:52.894531 IBM MQ security bypass
HIGH (7.5)
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.
Published: 2024-09-07T14:09:19.767Z
Updated: 2024-10-31T16:31:36.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35156 vulnerable 2026-06-08 06:37:35.339119 IBM MQ information disclosure
MEDIUM (6.5)
IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292766.
Published: 2024-06-28T18:12:21.696Z
Updated: 2024-08-02T03:07:46.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35155 vulnerable 2026-06-08 06:37:35.335377 IBM MQ information disclosure
MEDIUM (6.5)
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765.
Published: 2024-06-28T17:40:37.828Z
Updated: 2024-08-02T03:07:46.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35116 vulnerable 2026-06-08 06:37:35.222962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31919 vulnerable 2026-06-08 06:35:32.406594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31912 vulnerable 2026-06-08 06:35:32.390242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.