VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2026/10xxx/CVE-2026-10747.json
T

163 lines
8.7 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-10747",
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"state": "PUBLISHED",
"assignerShortName": "ibm",
"dateReserved": "2026-06-03T13:39:03.419Z",
"datePublished": "2026-09-18T15:55:43.394Z",
"dateUpdated": "2026-09-21T12:47:23.571Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm",
"dateUpdated": "2026-09-18T15:55:43.394Z"
},
"title": "IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "IBM",
"product": "MQ Appliance",
"versions": [
{
"status": "affected",
"version": "9.4 LTS",
"lessThanOrEqual": "9.4.0.0 to 9.4.0.25",
"versionType": "custom"
},
{
"status": "affected",
"version": "9.4 CD",
"lessThanOrEqual": "9.4.1.0 to 9.4.5.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "10.0.0.0",
"lessThanOrEqual": "10.0.0.1 only",
"versionType": "semver"
}
],
"cpes": [
"cpe:2.3:a:ibm:mq_appliance:9.4:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:mq_appliance:9.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:mq_appliance:9.4.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:mq_appliance:9.4.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:mq_appliance:10.0.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:mq_appliance:10.0.0.1:*:*:*:*:*:*:*"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication.</p>"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7284690",
"tags": [
"vendor-advisory",
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseSeverity": "CRITICAL",
"baseScore": 10,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
}
],
"solutions": [
{
"lang": "en",
"value": "This vulnerability is addressed under APAR DT472411\n\n\n\nIBM strongly recommends addressing the vulnerability now.\n\n\n\nIBM MQ Appliance version 9.4 LTS\nApply IBM MQ Appliance fix pack 9.4.0.26 https://www.ibm.com/support/fixcentral/swg/selectFixes , or later firmware.\n\n\n\nIBM MQ Appliance version 9.4 CD - M2003\nUpgrade to IBM MQ Appliance 10.0.0.5 https://www.ibm.com/support/fixcentral/swg/selectFixes , or later firmware.\n\n\n\nIBM MQ Appliance version 9.4 CD - M2002\nApply  IBM MQ Appliance cumulative security update 9.4.5.3 https://www.ibm.com/support/fixcentral/swg/selectFixes , or later firmware.\n\n\n\nIBM MQ Appliance version 10 LTS\nApply IBM MQ Appliance fix pack 10.0.0.5 https://www.ibm.com/support/fixcentral/swg/selectFixes , or later firmware.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>This vulnerability is addressed under APAR DT472411</p><p>IBM strongly recommends addressing the vulnerability now.</p><p><strong>IBM MQ Appliance version 9.4 LTS</strong><br/>Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&amp;product=ibm/WebSphere/IBM+MQ+Appliance+M2000&amp;function=fixId&amp;fixids=9.4.0.26-IBM-MQ-Appliance+&amp;includeSupersedes=1\" rel=\"nofollow\">IBM MQ Appliance fix pack 9.4.0.26</a>, or later firmware.</p><p><strong>IBM MQ Appliance version 9.4 CD - M2003</strong><br/>Upgrade to <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&amp;product=ibm/WebSphere/IBM+MQ+Appliance+M2000&amp;function=fixId&amp;fixids=10.0.0.5-IBM-MQ-Appliance+&amp;includeSupersedes=1\" rel=\"nofollow\">IBM MQ Appliance 10.0.0.5</a>, or later firmware.</p><p><strong>IBM MQ Appliance version 9.4 CD - M2002</strong><br/>Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&amp;product=ibm/WebSphere/IBM+MQ+Appliance+M2000&amp;function=fixId&amp;fixids=9.4.5.3-IBM-MQ-Appliance+&amp;includeSupersedes=1\" rel=\"nofollow\">IBM MQ Appliance cumulative security update 9.4.5.3</a>, or later firmware.</p><p><strong>IBM MQ Appliance version 10 LTS</strong><br/>Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&amp;product=ibm/WebSphere/IBM+MQ+Appliance+M2000&amp;function=fixId&amp;fixids=10.0.0.5-IBM-MQ-Appliance+&amp;includeSupersedes=1\" rel=\"nofollow\">IBM MQ Appliance fix pack 10.0.0.5</a>, or later firmware.</p>"
}
]
}
]
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-10747",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-09-19T03:56:46.797549Z"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-09-21T12:47:23.571Z"
}
}
]
}
}
View Git Blame Copy Permalink