Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:lts:*:*:*

part: a version: 9.3.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq Appliance (3d4e405c-fb3b-50d7-8f20-6b403fdbccc6)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25048 vulnerable 2026-06-08 06:31:21.824172 IBM MQ code execution
HIGH (7.5)
IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.
Published: 2024-04-27T12:07:33.519Z
Updated: 2024-08-01T23:36:21.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46177 vulnerable 2026-06-08 06:12:44.323716 IBM MQ Appliance information disclosure
MEDIUM (6.5)
IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.
Published: 2023-12-18T14:11:51.583Z
Updated: 2024-08-02T20:37:39.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28513 vulnerable 2026-06-08 06:01:11.021563 IBM MQ denial of service
MEDIUM (5.9)
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
Published: 2023-07-19T01:49:14.604Z
Updated: 2024-10-21T15:35:56.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43902 vulnerable 2026-06-08 05:49:34.965514 IBM MQ denial of service
MEDIUM (6.5)
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.
Published: 2023-03-01T20:44:15.672Z
Updated: 2025-03-06T19:07:04.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40230 vulnerable 2026-06-08 05:48:24.353701 Details available
"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."
Published: 2022-11-03T00:00:00.000Z
Updated: 2025-05-02T20:13:28.518Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.