Mq Operator

Vendor:

First CVE: Mar 3, 2024 · Active for 2 years

12

Total CVEs

More Total CVEs than 90% of tracked products

6.0

Avg CVEs / Year

Higher CVE frequency than 90% of tracked products

7.2

Avg CVSS

Higher Avg CVSS than 45% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Mq Operator over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 3, 2024

2 years ago

Most Recent CVE

Jul 24, 2025

366 days ago

CVE Severity & Scoring

Mq Operator12 CVEs

50%

33%

17%

All CVEs352,427 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local3 (25.0%)

Network9 (75.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low12 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None12 (100.0%)

Unknown0 (0.0%)

Required0 (0.0%)

Privileges Required

Low7 (58.3%)

High0 (0.0%)

None5 (41.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2025-36041CRITICAL IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.1	Jun 15, 2025	9.8	29	NO	NO
CVE-2024-39742CRITICAL IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-F	Jul 8, 2024	9.8	29	NO	NO
CVE-2024-40681HIGH IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions	Sep 7, 2024	8.8	26	NO	NO
CVE-2025-36005MEDIUM IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Inter	Jul 24, 2025	6.5	22	NO	NO
CVE-2024-39743HIGH IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker	Jul 8, 2024	7.5	22	NO	NO
CVE-2025-1333MEDIUM IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator S	May 1, 2025	6.5	21	NO	NO
CVE-2024-27255HIGH IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptogr	Mar 3, 2024	7.5	21	NO	NO
CVE-2025-33013MEDIUM IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Conta	Jul 24, 2025	5.5	20	NO	NO
CVE-2024-27256HIGH IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryp	Jan 27, 2025	7.5	20	NO	NO
CVE-2023-47745MEDIUM IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentia	Mar 3, 2024	5.5	19	NO	NO

View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Mq Operator

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
3.5.1	2	6.5	0.3%
3.5.0	5	7.0	0.2%
3.4.1	5	7.0	0.2%
3.4.0	5	7.0	0.2%
3.3.0	5	7.0	0.2%
3.2.4	1	5.5	0.2%
3.0.1	9	7.7	0.4%
3.0.0	9	7.7	0.4%
2.0.26	1	5.5	0.2%
2.0.18	2	6.5	0.2%
2.0.0	2	6.5	0.2%