U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/a:ibm:websphere_mq_light:1.0
There are 7 matching records.
Displaying matches 1 through 7.
Vuln ID Summary CVSS Severity
CVE-2015-4942

IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4943.

Published: January 18, 2016; 12:59:00 AM -0500 		V3.0: 5.3 MEDIUM
 V2.0: 5.0 MEDIUM
CVE-2015-4943

IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942.

Published: January 01, 2016; 12:59:01 AM -0500 		V3.0: 5.3 MEDIUM
 V2.0: 5.0 MEDIUM
CVE-2015-4941

IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors.

Published: January 01, 2016; 12:59:00 AM -0500 		V3.0: 5.3 MEDIUM
 V2.0: 5.0 MEDIUM
CVE-2015-1987

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956 and CVE-2015-1958.

Published: August 03, 2015; 3:59:03 PM -0400 		V3.x:(not available)
 V2.0: 7.8 HIGH
CVE-2015-1958

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956 and CVE-2015-1987.

Published: August 03, 2015; 3:59:02 PM -0400 		V3.x:(not available)
 V2.0: 7.8 HIGH
CVE-2015-1956

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1958 and CVE-2015-1987.

Published: August 03, 2015; 3:59:01 PM -0400 		V3.x:(not available)
 V2.0: 7.8 HIGH
CVE-2015-1955

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data.

Published: August 03, 2015; 3:59:00 PM -0400 		V3.x:(not available)
 V2.0: 7.8 HIGH