CVE-2016-9009 — Improper Input Validation in Corporation Websphere MQ

CWE-20 — Improper Input ValidationCWE-2643 documents3 sources
Severity
3.1LOWNVD
EPSS
0.3%
top 42.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Corporation Websphere MQIBM Websphere MQ
Timeline
PublishedFeb 24
Latest updateMay 17

Description

IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:LExploitability: 1.6 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/websphere_mq7 versions+6

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vgvq-46x3-9v78: IBM WebSphere MQ 8↗2022-05-17
▶
CVEList
CVE-2016-9009: IBM WebSphere MQ 8↗2017-02-24
▶
CVE-2016-9009 — Improper Input Validation | cvebase