GCVE - cpe:2.3:a:ibm:mq:9.1.0:*:*:*:continuous_delivery:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.1.0:*:*:*:continuous_delivery:*:*:*

part: a version: 9.1.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Mq (`00878131-6c19-566d-8f48-7c2806539301`)
Edition	*
Language	*
Software edition	continuous_delivery
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-28514`	vulnerable	2026-06-08 06:01:11.023926	IBM MQ information disclosure MEDIUM (6.2) IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398. Published: 2023-05-19T14:43:45.786Z Updated: 2025-02-12T16:45:31.945Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6985835 https://exchange.xforce.ibmcloud.com/vulnerabilities/250398	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42436`	vulnerable	2026-06-08 05:49:29.926910	IBM MQ information disclosure MEDIUM (4) IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206. Published: 2023-02-08T19:28:52.753Z Updated: 2025-03-25T13:56:20.998Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6909467 https://exchange.xforce.ibmcloud.com/vulnerabilities/238206	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31772`	vulnerable	2026-06-08 05:44:42.203675	IBM MQ denial of service MEDIUM (5.3) IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335. Published: 2022-11-11T18:56:12.717Z Updated: 2025-05-01T13:35:04.809Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6833806 https://exchange.xforce.ibmcloud.com/vulnerabilities/228335	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22489`	vulnerable	2026-06-08 05:40:53.840182	Details available HIGH (8.2) IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339. Published: 2022-08-19T18:50:10.108Z Updated: 2024-09-16T19:14:53.919Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6613021 https://exchange.xforce.ibmcloud.com/vulnerabilities/226339	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38875`	vulnerable	2026-06-08 05:33:48.463119	Details available MEDIUM (6.5) IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398. Published: 2021-11-23T19:15:31.816Z Updated: 2024-09-16T23:25:23.907Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6517672 https://exchange.xforce.ibmcloud.com/vulnerabilities/208398	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-4931`	vulnerable	2026-06-08 05:26:41.201834	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.