Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:lts:*:*:*

part: a version: 9.1.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36128 vulnerable 2026-06-08 07:21:01.112400 IBM MQ denial of service
HIGH (7.5)
IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.
Published: 2025-10-16T16:49:26.251Z
Updated: 2025-10-16T18:13:32.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36100 vulnerable 2026-06-08 07:21:00.964340 IBM MQ information disclosure
MEDIUM (5.1)
IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.
Published: 2025-09-07T00:37:00.421Z
Updated: 2025-10-09T16:22:51.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51470 vulnerable 2026-06-08 06:52:12.070015 IBM MQ denial of service
MEDIUM (6.5)
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
Published: 2024-12-18T19:56:10.377Z
Updated: 2024-12-18T20:24:38.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31919 vulnerable 2026-06-08 06:35:32.411179 IBM MQ denial of service
MEDIUM (5.9)
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used. IBM X-Force ID: 290259.
Published: 2024-06-28T17:34:15.469Z
Updated: 2024-08-02T01:59:50.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28950 vulnerable 2026-06-08 06:02:36.674771 IBM MQ information disclosure
MEDIUM (5.1)
IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.
Published: 2023-05-19T15:20:50.476Z
Updated: 2025-02-12T17:03:03.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28514 vulnerable 2026-06-08 06:01:11.023968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28513 vulnerable 2026-06-08 06:01:11.007755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42436 vulnerable 2026-06-08 05:49:29.927754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31772 vulnerable 2026-06-08 05:44:42.204306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22489 vulnerable 2026-06-08 05:40:53.840715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38875 vulnerable 2026-06-08 05:33:48.463795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4931 vulnerable 2026-06-08 05:26:41.201970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4682 vulnerable 2026-06-08 05:26:40.671990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1883 vulnerable 2026-06-08 05:11:26.338578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.