CVE-2022-22489

🗓️ 19 Aug 2022 18:50:10Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 115 Views

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) XML External Entity Injection (XXE) vulnerability

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: IBM MQ Explorer is vulnerable to an XML External Entity Injection (XXE) attack (CVE-2022-22489)	19 Jan 202313:58	–	ibm
ATTACKERKB	CVE-2022-22489	18 Aug 202200:00	–	attackerkb
Circl	CVE-2022-22489	19 Aug 202222:17	–	circl
CNNVD	IBM MQ 代码问题漏洞	18 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-22489	19 Aug 202218:50	–	cvelist
EUVD	EUVD-2022-27635	3 Oct 202520:07	–	euvd
Tenable Nessus	IBM MQ XXE (6613021)	24 Aug 202200:00	–	nessus
NCSC	Vulnerability fixed in IBM MQ	19 Aug 202200:00	–	ncsc
NVD	CVE-2022-22489	19 Aug 202219:15	–	nvd
Prion	Xxe	19 Aug 202219:15	–	prion

NVD

Vulners

Node

ibm mqMatch8.0.0.0

ibm mqMatch9.0.0.0lts

ibm mqMatch9.1.0continuous_delivery

ibm mqMatch9.1.0.0lts

ibm mqMatch9.2.0continuous_delivery

ibm mqMatch9.2.0lts

AND

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "product": "MQ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "9.0.LTS"
      },
      {
        "status": "affected",
        "version": "9.1.LTS"
      },
      {
        "status": "affected",
        "version": "9.1.CD"
      },
      {
        "status": "affected",
        "version": "9.2.CD"
      }
    ]
  }
]