IBM MQ 9.0

productDE

cpe:/a:ibm:mq:9.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical3high6medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-25869US	medium6.1	7.68% (95th)	—	no fix	2022-07-15	—
CVE-2020-4682US	critical9.8	7.55% (94th)	—	no fix	2021-01-28	—
CVE-2022-25844US	high7.5	4.93% (92nd)	—	no fix	2022-05-01	—
CVE-2019-4261US	medium6.5	2.35% (84th)	—	no fix	2019-08-05	—
CVE-2023-26118US	medium5.3	1.70% (77th)	—	no fix	2023-03-30	—
CVE-2023-26117US	medium5.3	1.70% (77th)	—	no fix	2023-03-30	—
CVE-2023-26116US	medium5.3	1.70% (77th)	—	no fix	2023-03-30	—
CVE-2019-4762US	high7.5	1.60% (76th)	—	no fix	2020-04-16	—
CVE-2022-23539US	high8.1OT elevated	0.52% (44th)	—	no fix	2022-12-23	—
CVE-2020-4338US	medium5.5	0.33% (26th)	—	no fix	2020-04-16	—
CVE-2023-21986US	—	0.28% (21st)	—	no fix	2023-04-18	—

The flaw types (CWEs) most of these CVEs share.

CWE-1333Inefficient Regular Expression Complexity4 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.