IBM MQ Operator

productDE

cpe:/a:ibm:mq:operator

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

20critical75high26medium4low

updated 2026-10-27

vulnerabilities (339)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-45288US	—	92.0% (100th)	Exploit	no fix	2024-04-04	—
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	no fix	2024-04-04	—
CVE-2023-46214US	high8.8	89.2% (100th)	Exploit	no fix	2023-11-16	—
CVE-2024-30255US	high7.5	87.8% (100th)	Exploit	no fix	2024-04-04	—
CVE-2024-23334US	high7.5	76.9% (100th)	Exploit	no fix	2024-01-29	—
CVE-2026-34040US	high7.8OT elevated	9.11% (95th)	Exploit	no fix	2026-03-31	—
CVE-2026-45447US	—	4.00% (90th)	Exploit	no fix	2026-06-09	—
CVE-2026-39983US	—	2.19% (82nd)	Exploit	no fix	2026-04-09	—
CVE-2026-33186US	—	1.58% (75th)	Exploit	no fix	2026-03-20	—
CVE-2025-30749US	—	1.27% (70th)	Exploit	no fix	2025-07-15	—
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	—
CVE-2026-63072US	—	0.92% (60th)	Exploit	no fix	2026-08-25	—
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	no fix	2026-05-22	—
CVE-2026-8932US	—	0.40% (34th)	Exploit	no fix	2026-07-03	—
CVE-2026-22008US	—	0.21% (11th)	Exploit	no fix	2026-04-21	—
CVE-2026-41567US	—	0.15% (5th)	Exploit	no fix	2026-06-05	—
CVE-2026-22003US	—	0.10% (1st)	Exploit	no fix	2026-04-21	—
CVE-2024-31309US	—	94.6% (100th)	—	no fix	2024-04-10	—
CVE-2024-27919US	—	86.7% (100th)	—	no fix	2024-04-04	—
CVE-2024-28182US	—	85.0% (100th)	—	no fix	2024-04-04	—
CVE-2024-2653US	—	83.4% (100th)	—	no fix	2024-04-03	—
CVE-2024-2758US	—	72.8% (99th)	—	no fix	2024-04-03	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2026-42508US	—	6.91% (94th)	—	no fix	2026-05-22	—
CVE-2025-30761US	—	5.23% (92nd)	—	no fix	2025-07-15	—
CVE-2017-9048US	high7.5	4.85% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9050US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9049US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2026-50627US	critical9.1	4.52% (91st)	—	no fix	2026-06-12	—
CVE-2017-9047US	high7.5	3.16% (88th)	—	no fix	2017-05-18	—
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	—
CVE-2022-31799US	critical9.8	2.14% (82nd)	—	no fix	2022-06-02	—
CVE-2026-33845US	critical9.1	2.07% (81st)	—	no fix	2026-04-30	—
CVE-2025-9232US	—	2.00% (81st)	—	no fix	2025-09-30	—
CVE-2026-39821US	—	1.83% (79th)	—	no fix	2026-05-22	—
CVE-2024-34459US	—	1.80% (78th)	—	no fix	2024-05-14	—
CVE-2026-18798US	—	1.70% (77th)	—	no fix	2026-08-25	—
CVE-2026-63076US	—	1.60% (76th)	—	no fix	2026-08-25	—
CVE-2025-49796US	—	1.56% (75th)	—	no fix	2025-06-16	—
CVE-2024-1394US	—	1.53% (75th)	—	no fix	2024-03-21	—
CVE-2024-52533US	—	1.51% (74th)	—	no fix	2024-11-11	—
CVE-2018-16487US	medium5.6	1.49% (74th)	—	no fix	2019-02-01	—
CVE-2025-32988US	high8.2	1.47% (74th)	—	no fix	2025-07-10	—
CVE-2025-32989US	—	1.47% (74th)	—	no fix	2025-07-10	—
CVE-2025-6021US	—	1.37% (72nd)	—	no fix	2025-06-12	—
CVE-2023-37276US	high7.5	1.34% (71st)	—	no fix	2023-07-19	—
CVE-2026-42009US	—	1.33% (71st)	—	no fix	2026-05-18	—
CVE-2025-21613US	—	1.28% (70th)	—	no fix	2025-01-06	—
CVE-2026-33846US	—	1.26% (70th)	—	no fix	2026-05-04	—
CVE-2024-21138US	—	1.26% (69th)	—	no fix	2024-07-16	—

showing 50 of 339

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption32 CVEs
CWE-20Improper Input Validation23 CVEs
CWE-770Allocation of Resources Without Limits or Throttling22 CVEs
CWE-125Out-of-bounds Read16 CVEs
CWE-476NULL Pointer Dereference15 CVEs
CWE-295Improper Certificate Validation14 CVEs
CWE-122Heap-based Buffer Overflow13 CVEs
CWE-787Out-of-bounds Write12 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)339 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan