IBM MQ Command Injection (7184342)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 7184342 advisory. - IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters. CVE-2025-0975...

CVE-2025-0975

creationtimestamp| type| source ---|---|--- 2025-02-28 03:26:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5831 2025-02-28 04:00:37+00:00| seen| Telegram/hWtHpVPiv2Ll8ElDjrWn7knw1cB4w99LrKbSPFUZG8rmH1w 2025-02-28 05:19:12+00:00| seen| https://t.me/cvedetector/19115 2025-02-28...

CVE-2025-0975 IBM MQ code execution

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters...

CVE-2025-0975

CVE-2025-0975 affects IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console and is caused by improper neutralization of escape characters. An authenticated user could execute code on vulnerable installations. The issue is confirmed in IBM MQ console components; no exploitation specifics are provide...

CVE-2025-0975 IBM MQ code execution

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters...

Security Bulletin: IBM MQ Console is affected by a command injection vulnerability (CVE-2025-0975)

Summary IBM MQ has addressed a command injection vulnerability in the MQ Console Vulnerability Details CVEID:CVE-2025-0975 DESCRIPTION: IBM MQ console could allow an authenticated user to execute code due to improper neutralization of escape characters. CWE:CWE-150: Improper Neutralization of...

Security Bulletin: IBM MQ Appliance Console is affected by code injection vulnerability (CVE-2025-0975)

Summary IBM MQ Appliance has addressed a code injection vulnerability in the IBM MQ Console. Vulnerability Details CVEID:CVE-2025-0975 DESCRIPTION: IBM MQ console could allow an authenticated user to execute code due to improper neutralization of escape characters. CWE:CWE-150: Improper...