IBM MQ 9.1
productDEcpe:/a:ibm:mq:9.1
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
2critical4high6medium0low
updated 2026-10-28
01
vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-44228US | critical10.0OT critical | KEV |
| CVE-2022-25869US | medium6.1 | — |
| CVE-2020-4682US | critical9.8 | — |
| CVE-2022-25844US | high7.5 | — |
| CVE-2019-4261US | medium6.5 | — |
| CVE-2023-26118US | medium5.3 | — |
| CVE-2023-26117US | medium5.3 | — |
| CVE-2023-26116US | medium5.3 | — |
| CVE-2019-4762US | high7.5 | — |
| CVE-2024-21217US | — | — |
| CVE-2023-42950US | high8.8 | — |
| CVE-2024-21208US | — | — |
| CVE-2024-21235US | — | — |
| CVE-2024-21210US | — | — |
| CVE-2024-21211US | — | — |
| CVE-2022-23539US | high8.1OT elevated | — |
| CVE-2025-61748US | — | — |
| CVE-2020-4338US | medium5.5 | — |
| CVE-2023-21986US | — | — |
| CVE-2025-61755US | —OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-1333Inefficient Regular Expression Complexity4 CVEs
- CWE-400Uncontrolled Resource Consumption3 CVEs
- CWE-502Deserialization of Untrusted Data3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-203Observable Discrepancy2 CVEs
- CWE-404Improper Resource Shutdown or Release2 CVEs
- CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)20 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan