CVE-2022-40237
MEDIUMIBM MQ for HPE NonStop 8.1.0 - Denial of Service via CCDT and Channel Synchronization Logic
Title source: llmDescription
IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.
References (2)
Core 2
Core References
Patch, Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/6958136
VDB Entry, Vendor Advisory vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/235727
Scores
CVSS v3
6.5
EPSS
0.0020
EPSS Percentile
41.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (1)
ibm/mq_for_hpe_nonstop
8.1.0
Published
Feb 27, 2023
Tracked Since
Feb 18, 2026