IBM WebSphere Mq Light vulnerabilities
7 CVEs affecting IBM WebSphere Mq Light, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4942, published 2016-01-18.
More from IBM.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2015-4943, published 2016-01-01. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than…
- CVE-2015-4941, published 2016-01-01. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors.
- CVE-2015-1987, published 2015-08-03. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956…
- CVE-2015-4942, published 2016-01-18. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than…
- CVE-2015-1958, published 2015-08-03. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956…
- CVE-2015-1956, published 2015-08-03. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1958…
- CVE-2015-1955, published 2015-08-03. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data.