IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation, potentially leading to information disclosure or remote code execution.
Risk score
8.1
CVSS 3.1
IBM
| Version / range | Status | Type |
|---|---|---|
| 9.1.0.0 to 9.1.0.37 LTS | affected | semver |
| 9.2.0.0 to 9.2.0.43 LTS | affected | semver |
| 9.3.0.0 to 9.3.0.41 LTS | affected | semver |
| 9.3.0.0 to 9.3.5.1 CD | affected | semver |
| 9.4.0.0 to 9.4.0.25 LTS | affected | semver |
| 9.4.0.0 to 9.4.5.1 CD | affected | semver |
| 10.0.0.0 | affected | — |
8.1
CVSS 3.1