5.4
Medium
CVE-2018-1429 IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting
Description
IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139077.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Appliance 9.0 | 9.0.1 → 9.0.4 | No fix stated |
Other CVEs of MQ Appliance
The 36 CVEs of MQ Appliance →
CVE-2026-12538
IBM MQ Appliance is affected by an improper validation vulnerability
5.4
Medium
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to…
10.0
Critical
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
5.9
Medium
CVE-2025-3631
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
6.5
Medium