Skip to content
Threat Feed
Subscribe

Product

MQ (9.1.0.0 Through 9.1.0.37 LTS, 9.2.0.0 Through 9.2.0.43 LTS, 9.3.0.0 Through 9.3.0.41 LTS, 9.3.0.0 Through 9.3.5.1 CD, 9.4.0.0 Through 9.4.0.25 LTS, 9.4.0.0 Through 9.4.5.1 CD, 10.0.0.0 Managed File Transfer)

1 brief RSS
high advisory

IBM MQ XML External Entity Injection Vulnerability

An XML external entity injection vulnerability in IBM MQ allows authenticated attackers to perform arbitrary file reads or server-side request forgery during reply message processing.

MQ
1t 1c