CVE-2024-25015
IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.92%
- CWE
- CWE-406
- Published
- 2024-05-01
- Last modified
- 2026-03-13
Affected products
- IBM MQ
Weakness type
Related vulnerabilities
- CVE-2026-86202 — PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket
- CVE-2026-68080 — Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
- CVE-2026-54609 — QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
- CVE-2026-50045 — 'max-global-quota' reset by DNSSEC validation restarts
- CVE-2026-45557 — Technitium DNS Server excessive DNSSEC requests
- CVE-2025-58066 — DoS Vulnerability in ntpd-rs
- CVE-2021-38135 — Possible External service interaction Vulnerability in OpenText iManager
- CVE-2014-125036 — drybjed ansible-ntp main.yml amplification