CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7284940

Configurations

No configuration.

History

18 Sep 2026, 20:17

Type	Values Removed	Values Added
Summary	(en) IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.	(en) IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Information

Published : 2026-09-14 21:17

Updated : 2026-09-18 20:17

NVD link : CVE-2026-13285

Mitre link : CVE-2026-13285

CVE.ORG link : CVE-2026-13285

JSON object : View

Products Affected

No product.

CWE

CWE-611

Improper Restriction of XML External Entity Reference

{"id": "CVE-2026-13285", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13285", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-15T13:29:53.049779Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "MQ", "versions": [{"status": "affected", "version": "9.1.0.0", "versionType": "semver", "lessThanOrEqual": "9.1.0.37 LTS"}, {"status": "affected", "version": "9.2.0.0", "versionType": "semver", "lessThanOrEqual": "9.2.0.43 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.0.41 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.5.1 CD"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.0.25 LTS"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.5.1 CD"}, {"status": "affected", "version": "10.0.0.0"}]}]}], "published": "2026-09-14T21:17:01.823", "references": [{"url": "https://www.ibm.com/support/pages/node/7284940", "source": "psirt@us.ibm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-611"}]}], "descriptions": [{"lang": "en", "value": "IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources."}], "lastModified": "2026-09-18T20:17:05.240", "sourceIdentifier": "psirt@us.ibm.com"}