CVE-2022-40237

IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.

• CWE-20

• https://exchange.xforce.ibmcloud.com/vulnerabilities/235727VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6958136Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/235727VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6958136Patch, Vendor Advisory

Published

Feb 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40230"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does …6.5
• CVE-2022-40231IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through…8.8
• CVE-2022-40232 IBM Sterling B2B Integrator Standard Edition 6.1.0.0 throug…8.8
• CVE-2022-40233IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…6.2
• CVE-2022-40234Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excl…5.9
• CVE-2022-40235"IBM InfoSphere Information Server 11.7 could allow a user t…6.5
• CVE-2022-40238A Remote Code Injection vulnerability exists in CERT softwar…8.8
• CVE-2022-4024The Registration Forms WordPress plugin before 3.8.1.3 does …6.5
• CVE-2022-40242MegaRAC Default Credentials Vulnerability9.8
• CVE-2022-40246A potential attacker can write one byte by arbitrary address…7.2
• CVE-2022-40248An HTML injection vulnerability exists in CERT/CC VINCE soft…5.4
• CVE-2022-4025Inappropriate implementation in Paint in Google Chrome prior…4.3