CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 0CVE-2021-38967
https://notcve.org/view.php?id=CVE-2021-38967
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, podría permitir a un usuario local con privilegios inyectar y ejecutar código malicioso. IBM X-Force ID: 212441 • https://exchange.xforce.ibmcloud.com/vulnerabilities/212441 https://www.ibm.com/support/pages/node/6512826 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-38958
https://notcve.org/view.php?id=CVE-2021-38958
IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042 IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, está afectado por un ataque de denegación de servicio causado por un problema de concurrencia. IBM X-Force ID: 212042 • https://exchange.xforce.ibmcloud.com/vulnerabilities/212043 https://www.ibm.com/support/pages/node/6519420 •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4931
https://notcve.org/view.php?id=CVE-2020-4931
IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747. IBM MQ versiones 9.1 LTS, 9.2 LTS y 9.1, CD AMQP Channels podría permitir a un usuario autenticado causar una denegación de servicio debido a un problema al procesar mensajes. IBM X-Force ID: 191747 • https://exchange.xforce.ibmcloud.com/vulnerabilities/191747 https://www.ibm.com/support/pages/node/6403295 •
CVSS: 10.0EPSS: 1%CPEs: 47EXPL: 0CVE-2020-4682
https://notcve.org/view.php?id=CVE-2020-4682
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509. IBM MQ versiones 7.5, 8.0, 9.0, 9.1, 9.2 LTS y 9.2 CD, podrían permitir a un atacante remoto ejecutar código arbitrario en el sistema, causado por una deserialización no segura de datos confiables. Un atacante podría explotar esta vulnerabilidad para ejecutar código arbitrario en el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/186509 https://www.ibm.com/support/pages/node/6408626 • CWE-502: Deserialization of Untrusted Data •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4869
https://notcve.org/view.php?id=CVE-2020-4869
IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a specially crafted SNMP query to cause the appliance to reload. IBM X-Force ID: 190831. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, es vulnerable a una denegación de servicio, causada por un desbordamiento del búfer. Un atacante remoto podría enviar una consulta SNMP especialmente diseñada para causar que el dispositivo se recargue. • https://exchange.xforce.ibmcloud.com/vulnerabilities/190831 https://www.ibm.com/support/pages/node/6398791 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •