Not rated
CVE-2016-0360 IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted…
Description
IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath. IBM Reference #: 1983457.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere MQ | 9.0 | No fix stated |
| WebSphere MQ | 8.0 | No fix stated |
| WebSphere MQ | 7.5 | No fix stated |
| WebSphere MQ | 7.1 | No fix stated |
| WebSphere MQ | 7.0.1 | No fix stated |
Other CVEs of WebSphere MQ
The 8 CVEs of WebSphere MQ →
CVE-2017-1145
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow…
Not rated
CVE-2016-8971
IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault…
Not rated
CVE-2016-9009
IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of…
Not rated
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling
Not rated