IBM Mq Appliance m2000 vulnerabilities

3 CVEs affecting IBM Mq Appliance m2000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1985, published 2016-01-03.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7420, published 2016-01-01. Low severity, CVSS 3.7. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421.
• CVE-2015-7421, published 2016-01-01. Low severity, CVSS 3.7. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420.
• CVE-2015-1985, published 2016-01-03. Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days. The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.