8.2
Élevée
CVE-2022-22489 IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack…
Description
IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.
Produits et versions touchés
Autres CVE de MQ
Les 117 CVE de MQ →
CVE-2026-10859
IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
7.5
Élevée
CVE-2026-11376
IBM MQ is affected by a denial of service vulnerability
8.8
Élevée
CVE-2026-11724
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
8.5
Élevée
CVE-2026-12356
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
7.5
Élevée