IBM Mq Internet Pass-Thru vulnerabilities

2 CVEs affecting IBM Mq Internet Pass-Thru, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-35719, published 2022-11-14.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-4766, published 2021-01-22. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093.
• CVE-2022-35719, published 2022-11-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user.