Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:8.0.0.0:*:*:*:*:*:*:*

part: a version: 8.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28950 vulnerable 2026-06-08 06:02:36.673001 IBM MQ information disclosure
MEDIUM (5.1)
IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.
Published: 2023-05-19T15:20:50.476Z
Updated: 2025-02-12T17:03:03.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28514 vulnerable 2026-06-08 06:01:11.023081 IBM MQ information disclosure
MEDIUM (6.2)
IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.
Published: 2023-05-19T14:43:45.786Z
Updated: 2025-02-12T16:45:31.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42436 vulnerable 2026-06-08 05:49:29.925212 IBM MQ information disclosure
MEDIUM (4)
IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.
Published: 2023-02-08T19:28:52.753Z
Updated: 2025-03-25T13:56:20.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31772 vulnerable 2026-06-08 05:44:42.201981 IBM MQ denial of service
MEDIUM (5.3)
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.
Published: 2022-11-11T18:56:12.717Z
Updated: 2025-05-01T13:35:04.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22489 vulnerable 2026-06-08 05:40:53.838685 Details available
HIGH (8.2)
IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.
Published: 2022-08-19T18:50:10.108Z
Updated: 2024-09-16T19:14:53.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38875 vulnerable 2026-06-08 05:33:48.455105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4682 vulnerable 2026-06-08 05:26:40.653489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.