Threats tagged 'ghsa-g6j2-r566-x9g5'

IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with limited privileges to exploit XML processing to expose sensitive information or cause memory resource consumption. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. No public exploits or known exploitation in the wild have been reported. Patch status is not confirmed as no patch or remediation details are provided.