5.5
Medium
CVE-2025-0985 IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that…
Description
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ | Versions not published |
Other CVEs of MQ
The 117 CVEs of MQ →
CVE-2026-10859
IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
7.5
High
CVE-2026-11376
IBM MQ is affected by a denial of service vulnerability
8.8
High
CVE-2026-11724
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
8.5
High
CVE-2026-12356
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
7.5
High