CVEvulnerability
CVE-2023-28513
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-20
Description
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.
Affected configurations
• ibm mq 9.0.0.0
• ibm mq 9.1.0.0
• ibm mq 9.2.0
• ibm mq 9.3.0
• ibm mq appliance 9.2.0.0
• ibm mq appliance 9.3.0.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7007421 Patch, Vendor Advisory
- https://www.ibm.com/support/pages/node/7007731 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7007421 Patch, Vendor Advisory
- https://www.ibm.com/support/pages/node/7007731 Patch, Vendor Advisory