PatchTheCVE: mq appliancehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-14456: IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1https://patchthecve.com/cve/CVE-2025-14456.htmlhttps://patchthecve.com/cve/CVE-2025-14456.htmlWed, 17 Jun 2026 08:35:57 +0000MEDIUM 5.9: IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1CVE-2025-3631: An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel prohttps://patchthecve.com/cve/CVE-2025-3631.htmlhttps://patchthecve.com/cve/CVE-2025-3631.htmlWed, 17 Jun 2026 09:20:21 +0000MEDIUM 6.5: An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.CVE-2025-23225: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service duehttps://patchthecve.com/cve/CVE-2025-23225.htmlhttps://patchthecve.com/cve/CVE-2025-23225.htmlWed, 17 Jun 2026 08:52:46 +0000MEDIUM 6.5: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.CVE-2025-0975: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to ihttps://patchthecve.com/cve/CVE-2025-0975.htmlhttps://patchthecve.com/cve/CVE-2025-0975.htmlWed, 17 Jun 2026 08:27:27 +0000HIGH 8.8: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.CVE-2024-54173: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that coulhttps://patchthecve.com/cve/CVE-2024-54173.htmlhttps://patchthecve.com/cve/CVE-2024-54173.htmlWed, 17 Jun 2026 08:09:53 +0000MEDIUM 4.7: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.CVE-2024-51471: IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-https://patchthecve.com/cve/CVE-2024-51471.htmlhttps://patchthecve.com/cve/CVE-2024-51471.htmlWed, 17 Jun 2026 08:05:45 +0000MEDIUM 5.3: IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.CVE-2024-51470: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM https://patchthecve.com/cve/CVE-2024-51470.htmlhttps://patchthecve.com/cve/CVE-2024-51470.htmlWed, 17 Jun 2026 08:05:45 +0000MEDIUM 6.5: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.CVE-2024-25048: IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds chechttps://patchthecve.com/cve/CVE-2024-25048.htmlhttps://patchthecve.com/cve/CVE-2024-25048.htmlWed, 17 Jun 2026 07:15:25 +0000HIGH 7.5: IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.