جزئیات آسیبپذیری
CVE-2026-12148
IBM MQ Advanced container imagesIBM MQ Operator
IBM MQ Deserialization of Untrusted Data
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (ibm) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| IBM | MQ Advanced container images | 10.0.0.5-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.0-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.1-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.1-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.1-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.1-r4 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.10-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.10-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.11-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.11-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.15-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.16-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.16-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.17-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.17-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.17-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.20-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.20-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.21-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.21-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.21-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.25-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.3-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.4-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.4-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.5-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.5-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.5-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.3.0.6-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.0-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.10-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.10-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.11-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.11-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.11-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.12-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.16-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.16-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.17-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.17-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.20-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.21-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.21-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.26-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.5-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.5-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.6-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.7-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.1.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.1.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.1.1-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.2.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.2.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.2.1-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.2.1-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.3.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.3.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.4.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.4.1-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.5.0-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.5.0-r2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.5.1-r1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 10.0.0.0-r1 ≤ v ≤ 10.0.0.0-r4 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.15-r1 ≤ v ≤ 9.4.0.15-r4 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.25-r1 ≤ v ≤ 9.4.0.25-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.0.6-r1 ≤ v ≤ r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Advanced container images | 9.4.3.1-r1 ≤ v ≤ 9.4.3.1-r3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.4.1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.5.0 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.8.0 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.8.1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.9.0 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.9.1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.9.2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 4.0.0 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 4.0.1 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 4.0.2 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 4.0.3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 4.0.4 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 2.0.0 ≤ v ≤ 2.0.29 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.2.0 ≤ v ≤ 3.2.29 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.3.0 ≤ v < 3.4.0 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.5.1 ≤ v ≤ 3.5.3 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.6.0 ≤ v ≤ 3.6.4 | CVEProject cvelistV5 (CNA) |
| IBM | MQ Operator | 3.7.0 ≤ v ≤ 3.7.2 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱- https://www.ibm.com/support/pages/node/7292667 vendor-advisorypatch
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۲۷
- آخرین بهروزرسانی
- ۱۴۰۵/۰۷/۲۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- ibm
پیشبینی بهرهبرداری (EPSS)
۰٫۳۹٪
احتمال بهرهبرداری در ۳۰ روز
۳۳٫۸٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-502Deserialization of Untrusted Data