Threats tagged 'ghsa-pj8c-6jhv-qc67'

IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with low privileges to exploit XML processing to disclose sensitive information or cause memory resource consumption. The vulnerability has a high severity rating with a CVSS score of 7.1. No public exploits or patches are currently documented in the provided data.