432 matches found
Security Bulletin: IBM MQ Appliance appliance is affected by multiple Java vulnerabilities
Summary IBM MQ Appliance has addressed multiple Java vulnerabilities. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability...
Security Bulletin: IBM MQ Appliance is affected by an information exposure vulnerability (CVE-2026-40895)
Summary IBM MQ Appliance has addressed an information exposure vulnerability. Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP reque...
Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities (CVE-2026-23193, CVE-2026-23231, CVE-2026-3497)
Summary IBM MQ Appliance has addressed multiple open source vulnerabilities. Vulnerability Details CVEID:CVE-2026-3497 DESCRIPTION: Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions...
Security Bulletin: IBM MQ Appliance is affected by an integer overflow (CVE-2022-50865)
Summary IBM MQ Appliance has addressed an integer overflow. Vulnerability Details CVEID:CVE-2022-50865 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcpaddbacklog The type of skrcvbuf and sksndbuf in struct sock is int,...
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2026-21945)
Summary IBM MQ Appliance has addressed a denial of service vulnerability. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by an easily exploitable vulnerability issue that allows an remote attacker to cause a hang or repeatable crash of...
Security Bulletin: IBM MQ Appliance is affected by a default password vulnerability (CVE-2025-14917)
Summary IBM MQ Appliance has addressed a default password vulnerability. Vulnerability Details CVEID:CVE-2025-14917 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when...
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14456 IBM MQ Appliance uses weaker than expected cryptographic algorithms
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14456 IBM MQ Appliance uses weaker than expected cryptographic algorithms
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
EUVD-2025-208262
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14456
CVE-2025-14456 affects IBM MQ Appliance, specifically 9.4 CD through 9.4.4.0 to 9.4.4.1. The root cause is the use of weaker than expected cryptographic algorithms, resulting in a CVSS v3.1 base score of 5.9 (Impact: Confidentiality High; others None). IBM’s bulletin notes this could allow an att...
PT-2026-22819
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
Security Bulletin: IBM MQ Appliance is affected by a cross-site scripting vulnerablity (CVE-2025-12635)
Summary IBM MQ Appliance has addressed a cross-site scripting vulnerability. Vulnerability Details CVEID:CVE-2025-12635 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improp...
Security Bulletin: IBM MQ Appliance is affected by Linux kernel vulnerabilities (CVE-2025-39971 and CVE-2025-39955)
Summary IBM MQ Appliance has addressed multiple Linux kernel vulnerabilities. Vulnerability Details CVEID:CVE-2025-39971 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized...
Security Bulletin: IBM MQ Appliance uses weaker than expected cryptographic algorithms (CVE-2025-14456)
Summary IBM MQ Appliance has addressed use of weaker than expected cryptographic algorithms. Vulnerability Details CVEID:CVE-2025-14456 DESCRIPTION: IBM MQ Appliance uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CWE:CWE-32...
Security Bulletin: IBM MQ Appliance is affected by Java vulnerabilities (CVE-2025-52057 and CVE-2025-53066)
Summary IBM MQ Appliance has addressed Java vulnerabilities. Vulnerability Details CVEID:CVE-2025-53057 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote attacker to cause no confidentiality impact, high integrity impact, and no availabili...
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2025-48976)
Summary IBM MQ appliance has addressed a denial of service vulnerability. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...
EUVD-2021-25423
Malware in sbrugna...