PT-2025-9051 · Ibm · Ibm Mq

Published 2025-02-28 · Updated 2025-07-03 · CVE-2025-23225

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.3 LTS through 9.4 CD

Description The issue is caused by the improper handling of invalid headers sent to the queue, which could allow an authenticated user to cause a denial of service.

Recommendations For IBM MQ versions 9.3 LTS through 9.4 CD, update to a version that includes the fix for the improper handling of invalid headers to prevent a denial of service.

Fix

DoS

Weakness Enumeration

CWE-230

Related Identifiers

CVE-2025-23225

Affected Products

Ibm Mq

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-23225 · Security Note
• https://ibm.com/support/pages/node/7183372 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23225 · Vendor Advisory
• https://t.me/cvedetector/19116 · Telegram Post
• https://twitter.com/CVEnew/status/1895619353405780035 · Twitter Post
• https://t.me/cvenotify/112748 · Telegram Post
• https://t.me/cvenotify/127657 · Telegram Post