GCVE - cpe:2.3:a:ibm:mq:9.2.0:*:*:*:continuous_delivery:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.2.0:*:*:*:continuous_delivery:*:*:*

part: a version: 9.2.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Mq (`00878131-6c19-566d-8f48-7c2806539301`)
Edition	*
Language	*
Software edition	continuous_delivery
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-28950`	vulnerable	2026-06-08 06:02:36.675904	IBM MQ information disclosure MEDIUM (5.1) IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358. Published: 2023-05-19T15:20:50.476Z Updated: 2025-02-12T17:03:03.855Z Open on db.gcve.eu Reference links https://https://www.ibm.com/support/pages/node/6985837 https://exchange.xforce.ibmcloud.com/vulnerabilities/251358	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-28513`	vulnerable	2026-06-08 06:01:11.008884	IBM MQ denial of service MEDIUM (5.9) IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397. Published: 2023-07-19T01:49:14.604Z Updated: 2024-10-21T15:35:56.231Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/7007421 https://www.ibm.com/support/pages/node/7007731 https://exchange.xforce.ibmcloud.com/vulnerabilities/250397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42436`	vulnerable	2026-06-08 05:49:29.928640	IBM MQ information disclosure MEDIUM (4) IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206. Published: 2023-02-08T19:28:52.753Z Updated: 2025-03-25T13:56:20.998Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6909467 https://exchange.xforce.ibmcloud.com/vulnerabilities/238206	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31772`	vulnerable	2026-06-08 05:44:42.205371	IBM MQ denial of service MEDIUM (5.3) IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335. Published: 2022-11-11T18:56:12.717Z Updated: 2025-05-01T13:35:04.809Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6833806 https://exchange.xforce.ibmcloud.com/vulnerabilities/228335	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22489`	vulnerable	2026-06-08 05:40:53.841449	Details available HIGH (8.2) IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339. Published: 2022-08-19T18:50:10.108Z Updated: 2024-09-16T19:14:53.919Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6613021 https://exchange.xforce.ibmcloud.com/vulnerabilities/226339	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38875`	vulnerable	2026-06-08 05:33:48.464432	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-4870`	vulnerable	2026-06-08 05:26:41.115846	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.