Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22489

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.

Published

2022-08-19T19:15:07.467

Last Modified

2024-11-21T06:46:53.557

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-611
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm mq 8.0.0.0 Yes
Application ibm mq 9.0.0.0 Yes
Application ibm mq 9.1.0 Yes
Application ibm mq 9.1.0.0 Yes
Application ibm mq 9.2.0 Yes
Application ibm mq 9.2.0 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
References