PT-2026-20223 · Ibm · Ibm Mq+3

Published 2026-02-17 · Updated 2026-02-17 · CVE-2025-12755

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM MQ versions 3.2.0 through 3.8.1 IBM MQ LTS versions 2.0.0 through 2.0.29 IBM MQ 9.3.x versions IBM MQ 9.4.x versions

Description The software contains a flaw where log messages are not properly neutralized before being written to log files. This could allow an unauthorized user to inject malicious data into MQ log entries, potentially leading to misleading logs, log manipulation, or downstream log-processing issues.

Recommendations Update IBM MQ to a version later than 3.8.1. Update IBM MQ LTS to a version later than 2.0.29. Update IBM MQ 9.3.x to a later release. Update IBM MQ 9.4.x to a later release.

Fix

Weakness Enumeration

CWE-117

Related Identifiers

CVE-2025-12755

Affected Products

Ibm Mq

Ibm Mq 9.3.X

Ibm Mq 9.4.X

Ibm Mq Lts

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-12755 · Security Note
• https://t.me/CVEtracker/44890 · Telegram Post
• https://ibm.com/support/pages/node/7260087 · Patch, Vendor Advisory