Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_mq:6.0.2.10:*:*:*:*:*:*:*

part: a version: 6.0.2.10 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Mq (f0f0c403-b604-5a31-aaf6-3c626a116b8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1224 vulnerable 2026-06-08 04:57:57.253910 Details available
IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application.
Published: 2011-07-07T21:00:00.000Z
Updated: 2024-08-06T22:21:33.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0314 vulnerable 2026-06-08 04:56:36.480129 Details available
Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue.
Published: 2011-01-12T00:00:00.000Z
Updated: 2024-08-06T21:51:07.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2637 vulnerable 2026-06-08 04:55:09.174186 Details available
IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.
Published: 2010-11-12T20:00:00.000Z
Updated: 2024-08-07T02:39:37.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0900 vulnerable 2026-06-08 04:51:11.969855 Details available
Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file.
Published: 2011-10-30T19:00:00.000Z
Updated: 2024-08-07T04:48:52.700Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.