ibm mq operator

Name: ibm mq operator
Brand: ibm

productUS

cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical8high13medium1low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-36041US	critical9.8	0.36% (29th)	Exploit	no fix	2025-06-15	13 versions
CVE-2024-39742US	critical9.8	0.76% (55th)	—	2.0.24	2024-07-08	8 versions
CVE-2024-39743US	high7.5	0.59% (48th)	—	2.0.24	2024-07-08	8 versions
CVE-2024-40681US	high8.8	0.48% (41st)	—	no fix	2024-09-07	8 versions
CVE-2026-10572US	high8.8	0.45% (39th)	—	no fix	2026-10-19	27 versions
CVE-2026-10574US	high8.8	0.44% (38th)	—	no fix	2026-10-19	27 versions
CVE-2026-12148US	high8.8	0.40% (34th)	—	no fix	2026-10-19	27 versions
CVE-2025-27365US	—	0.39% (33rd)	—	no fix	2025-05-01	13 versions
CVE-2026-12665US	critical9.8	0.32% (24th)	—	no fix	2026-10-19	27 versions
CVE-2026-10743US	high8.8	0.28% (21st)	—	no fix	2026-10-19	27 versions
CVE-2025-1333US	medium6.5	0.28% (20th)	—	no fix	2025-05-01	13 versions
CVE-2024-27255US	high7.5OT elevated	0.26% (18th)	—	no fix	2024-03-03	7 versions
CVE-2026-12350US	medium6.5	0.26% (18th)	—	no fix	2026-10-19	27 versions
CVE-2026-12155US	medium6.5	0.26% (18th)	—	no fix	2026-10-19	27 versions
CVE-2026-11828US	medium5.9	0.25% (17th)	—	no fix	2026-10-19	27 versions
CVE-2026-11829US	medium6.5	0.24% (15th)	—	no fix	2026-10-19	27 versions
CVE-2026-12660US	low2.7	0.24% (15th)	—	no fix	2026-10-19	27 versions
CVE-2026-12343US	—	0.24% (15th)	—	no fix	2026-10-19	27 versions
CVE-2026-12727US	medium4.3	0.22% (12th)	—	no fix	2026-10-19	27 versions
CVE-2024-27256US	high7.5OT elevated	0.21% (11th)	—	no fix	2025-01-27	7 versions
CVE-2026-12670US	medium6.5	0.21% (11th)	—	no fix	2026-10-19	27 versions
CVE-2025-36005US	medium6.5	0.20% (10th)	—	no fix	2025-07-24	7 versions
CVE-2026-11831US	medium5.4	0.20% (10th)	—	no fix	2026-10-19	27 versions
CVE-2024-40680US	medium5.5	0.19% (8th)	—	no fix	2024-09-07	2 versions
CVE-2026-12669US	medium4.3	0.16% (5th)	—	no fix	2026-10-19	27 versions
CVE-2025-33013US	medium5.5	0.15% (4th)	—	no fix	2025-07-24	7 versions
CVE-2023-47745US	medium5.5OT elevated	0.12% (2nd)	—	no fix	2024-03-03	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-1223Race Condition for Write-Once Attributes1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan