CRITICAL🇵🇱 Wersja polska

CVE-2020-4682

CVSS 9.8v3.1pub. 2021-01-28upd. 2024-11-21

IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • IBM Mq

    APP
    Ibm
    8.0.0.08.0.0.18.0.0.108.0.0.118.0.0.128.0.0.138.0.0.148.0.0.158.0.0.28.0.0.38.0.0.48.0.0.58.0.0.68.0.0.78.0.0.8+ 21 more

  • IBM Mq Appliance

    APP
    Ibm
    9.2.0.0

  • IBM Websphere Mq

    APP
    Ibm
    7.5.0.07.5.0.17.5.0.27.5.0.37.5.0.47.5.0.57.5.0.67.5.0.77.5.0.87.5.0.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDeserialization
CWE
References

Related vulnerabilities

CVE-2022-22489CRITICAL9.1PL ✓same product

IBM MQ — podatność XXE umożliwiająca ujawnienie danych i wyczerpanie zasobów

CVE-2025-36128HIGH7.5same product

IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforce...

CVE-2025-0975HIGH8.8same product

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to i...

CVE-2024-31912HIGH7.5same product

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configu...

CVE-2024-25015HIGH7.5same product

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service ...