Mq Operator (Ibm) - vulnerabilities (CVEs)

29 CVEs, 15 in the last 30 days, 130 known versions, newest CVE from 2026-10-19. Vendor: Ibm.

CVEs of Mq Operator

CVE-2026-10572 - CVSS 8.8 (high), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing…
CVE-2026-10574 - CVSS 8.8 (high), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing…
CVE-2026-10743 - CVSS 8.8 (high), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
CVE-2026-11828 - CVSS 5.9 (medium), 2026-10-19: IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client…
CVE-2026-11829 - CVSS 6.5 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.
CVE-2026-11831 - CVSS 5.4 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an…
CVE-2026-12148 - CVSS 8.8 (high), 2026-10-19: IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java…
CVE-2026-12155 - CVSS 6.5 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer…
CVE-2026-12343 - CVSS 6.5 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe…
CVE-2026-12350 - CVSS 6.5 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue…
CVE-2026-12660 - CVSS 2.7 (low), 2026-10-19: IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.
CVE-2026-12665 - CVSS 9.8 (critical), 2026-10-19: IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished…
CVE-2026-12669 - CVSS 4.3 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed…
CVE-2026-12727 - CVSS 4.3 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted…
CVE-2026-12670 - CVSS 6.5 (medium), 2026-10-19: IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during…
CVE-2026-2607 - CVSS 5.1 (medium), 2026-05-27: IBM MQ Operator SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0,…
CVE-2025-12755 - CVSS 4 (medium), 2026-02-17: IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected SC2, CD, and LTS 9.3.x–9.4.x releases)…
CVE-2025-36005 - CVSS 6.5 (medium), 2025-07-24: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2…
CVE-2025-33013 - CVSS 6.2 (medium), 2025-07-24: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2…
CVE-2025-36041 - CVSS 9.8 (critical), 2025-06-15: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator…
CVE-2025-27365 - CVSS 6.5 (medium), 2025-05-01: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0…
CVE-2025-1333 - CVSS 6.5 (medium), 2025-05-01: IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0,…
CVE-2024-27256 - CVSS 7.5 (high), 2025-01-27: IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses…
CVE-2024-40681 - CVSS 8.8 (high), 2024-09-07: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security…
CVE-2024-40680 - CVSS 5.5 (medium), 2024-09-07: IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.
CVE-2024-39743 - CVSS 7.5 (high), 2024-07-08: IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory…
CVE-2024-39742 - CVSS 9.8 (critical), 2024-07-08: IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison…
CVE-2024-27255 - CVSS 7.5 (high), 2024-03-03: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker…
CVE-2023-47745 - CVSS 6.2 (medium), 2024-03-03: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or…