Files
vuln-cve/data/2026/12xxx/CVE-2026-12670.json
T

932 lines
54 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-12670",
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"state": "PUBLISHED",
"assignerShortName": "ibm",
"dateReserved": "2026-06-18T21:02:06.263Z",
"datePublished": "2026-10-19T16:39:30.332Z",
"dateUpdated": "2026-10-19T18:10:58.089Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm",
"dateUpdated": "2026-10-19T16:39:30.332Z"
},
"title": "IBM MQ Denial of Service",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-681",
"description": "CWE-681 Incorrect Conversion between Numeric Types",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "IBM",
"product": "MQ Operator",
"versions": [
{
"status": "affected",
"version": "3.2.0",
"lessThanOrEqual": "3.2.29",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.3.0",
"lessThan": "3.4.0",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.4.1",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.5.0",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.5.1",
"lessThanOrEqual": "3.5.3",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.6.0",
"lessThanOrEqual": "3.6.4",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.7.0",
"lessThanOrEqual": "3.7.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.8.0",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.8.1",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.9.0",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.9.1",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.9.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.0.1",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.0.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.0.3",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.0.4",
"versionType": "semver"
},
{
"status": "affected",
"version": "2.0.0",
"lessThanOrEqual": "2.0.29",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "IBM",
"product": "MQ Advanced container images",
"versions": [
{
"status": "affected",
"version": "9.4.0.6-r1",
"lessThanOrEqual": "r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2",
"versionType": "semver"
},
{
"status": "affected",
"version": "9.4.0.6-r2"
},
{
"status": "affected",
"version": "9.4.0.7-r1"
},
{
"status": "affected",
"version": "9.4.0.10-r1"
},
{
"status": "affected",
"version": "9.4.0.10-r2"
},
{
"status": "affected",
"version": "9.4.0.11-r1"
},
{
"status": "affected",
"version": "9.4.0.11-r2"
},
{
"status": "affected",
"version": "9.4.0.11-r3"
},
{
"status": "affected",
"version": "9.4.0.12-r1"
},
{
"status": "affected",
"version": "9.4.0.15-r1",
"lessThanOrEqual": "9.4.0.15-r4",
"versionType": "custom"
},
{
"status": "affected",
"version": "9.4.0.16-r1"
},
{
"status": "affected",
"version": "9.4.0.16-r2"
},
{
"status": "affected",
"version": "9.4.0.17-r1"
},
{
"status": "affected",
"version": "9.4.0.17-r2"
},
{
"status": "affected",
"version": "9.4.0.20-r1"
},
{
"status": "affected",
"version": "9.4.0.21-r1"
},
{
"status": "affected",
"version": "9.4.0.21-r2"
},
{
"status": "affected",
"version": "9.4.0.25-r1",
"lessThanOrEqual": "9.4.0.25-r3",
"versionType": "custom"
},
{
"status": "affected",
"version": "9.4.0.26-r1"
},
{
"status": "affected",
"version": "9.4.1.0-r1"
},
{
"status": "affected",
"version": "9.4.1.0-r2"
},
{
"status": "affected",
"version": "9.4.1.1-r1"
},
{
"status": "affected",
"version": "9.4.2.0-r1"
},
{
"status": "affected",
"version": "9.4.2.0-r2"
},
{
"status": "affected",
"version": "9.4.2.1-r1"
},
{
"status": "affected",
"version": "9.4.2.1-r2"
},
{
"status": "affected",
"version": "9.4.3.0-r1"
},
{
"status": "affected",
"version": "9.4.3.0-r2"
},
{
"status": "affected",
"version": "9.4.3.1-r1",
"lessThanOrEqual": "9.4.3.1-r3",
"versionType": "custom"
},
{
"status": "affected",
"version": "9.4.4.0-r1"
},
{
"status": "affected",
"version": "9.4.4.1-r1"
},
{
"status": "affected",
"version": "9.4.5.0-r1"
},
{
"status": "affected",
"version": "9.4.5.0-r2"
},
{
"status": "affected",
"version": "9.4.5.1-r1"
},
{
"status": "affected",
"version": "10.0.0.0-r1",
"lessThanOrEqual": "10.0.0.0-r4",
"versionType": "custom"
},
{
"status": "affected",
"version": "10.0.0.5-r1"
},
{
"status": "affected",
"version": "9.3.0.0-r1"
},
{
"status": "affected",
"version": "9.3.0.0-r2"
},
{
"status": "affected",
"version": "9.3.0.0-r3"
},
{
"status": "affected",
"version": "9.3.0.1-r1"
},
{
"status": "affected",
"version": "9.3.0.1-r2"
},
{
"status": "affected",
"version": "9.3.0.1-r3"
},
{
"status": "affected",
"version": "9.3.0.1-r4"
},
{
"status": "affected",
"version": "9.3.0.3-r1"
},
{
"status": "affected",
"version": "9.3.0.4-r1"
},
{
"status": "affected",
"version": "9.3.0.4-r2"
},
{
"status": "affected",
"version": "9.3.0.5-r1"
},
{
"status": "affected",
"version": "9.3.0.5-r2"
},
{
"status": "affected",
"version": "9.3.0.5-r3"
},
{
"status": "affected",
"version": "9.3.0.6-r1"
},
{
"status": "affected",
"version": "9.3.0.10-r1"
},
{
"status": "affected",
"version": "9.3.0.10-r2"
},
{
"status": "affected",
"version": "9.3.0.11-r1"
},
{
"status": "affected",
"version": "9.3.0.11-r2"
},
{
"status": "affected",
"version": "9.3.0.15-r1"
},
{
"status": "affected",
"version": "9.3.0.16-r1"
},
{
"status": "affected",
"version": "9.3.0.16-r2"
},
{
"status": "affected",
"version": "9.3.0.17-r1"
},
{
"status": "affected",
"version": "9.3.0.17-r2"
},
{
"status": "affected",
"version": "9.3.0.17-r3"
},
{
"status": "affected",
"version": "9.3.0.20-r1"
},
{
"status": "affected",
"version": "9.3.0.20-r2"
},
{
"status": "affected",
"version": "9.3.0.21-r1"
},
{
"status": "affected",
"version": "9.3.0.21-r2"
},
{
"status": "affected",
"version": "9.3.0.21-r3"
},
{
"status": "affected",
"version": "9.3.0.25-r1"
},
{
"status": "affected",
"version": "9.4.0.0-r1"
},
{
"status": "affected",
"version": "9.4.0.0-r2"
},
{
"status": "affected",
"version": "9.4.0.0-r3"
},
{
"status": "affected",
"version": "9.4.0.5-r1"
},
{
"status": "affected",
"version": "9.4.0.5-r2"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.</p>"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7292667",
"tags": [
"vendor-advisory",
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
}
],
"solutions": [
{
"lang": "en",
"value": "Issues mentioned by this security bulletin are addressed in -\nIBM MQ Operator v4.1.0 CD release that included IBM supplied MQ Advanced 10.0.1.0-r1 container image.\nIBM MQ Operator v4.0.5 SC2 release that included IBM supplied MQ Advanced 10.0.0.5-r2 container image.\nIBM MQ Operator v3.2.30 SC2 release that included IBM supplied MQ Advanced 9.4.0.26-r2 container image.\nIBM MQ Container 10.0.1.0-r1 and 10.0.0.5-r2 release.\nIBM strongly recommends applying the latest container images.\nIBM MQ Operator v4.1.0 CD release details:\nImage\nFix Version\nRegistry\nImage Location\nibm-mq-operator\nv4.1.0\nicr.io\nicr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127\nibm-mqadvanced-server\n10.0.1.0-r1\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\nibm-mqadvanced-server-dev\n10.0.1.0-r1\nicr.io\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\nIBM MQ Operator v4.0.5 SC2 release details:\nImage\nFix Version\nRegistry\nImage Location\nibm-mq-operator\nv4.0.5\nicr.io\nicr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930\nibm-mqadvanced-server\n10.0.0.5-r2\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\nibm-mqadvanced-server-dev\n10.0.0.5-r2\nicr.io\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b\n\nIBM MQ Operator v3.2.30 SC2 release details:\nImage\nFix Version\nRegistry\nImage Location\nibm-mq-operator\nv3.2.30\nicr.io\nicr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40\nibm-mqadvanced-server\n9.4.0.26-r2\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8\nibm-mqadvanced-server-integration\n9.4.0.26-r2\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad\nibm-mqadvanced-server-dev\n9.4.0.26-r2\nicr.io\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a\n\nIBM MQ Container 10.0.1.0-r1 release details:\nImage\nFix Version\nRegistry\nImage Location\nibm-mqadvanced-server\n10.0.1.0-r1\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\nibm-mqadvanced-server-dev\n10.0.1.0-r1\nicr.io\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\nIBM MQ Container 10.0.0.5-r2 release details:\nImage\nFix Version\nRegistry\nImage Location\nibm-mqadvanced-server\n10.0.0.5-r2\ncp.icr.io\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\nibm-mqadvanced-server-dev\n10.0.0.5-r2\nicr.io\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<div><p>Issues mentioned by this security bulletin are addressed in -</p><ul><li>IBM MQ Operator <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-mq-operator#ctr_release_notes__operator-4.1.0__title__1\" rel=\"nofollow\">v4.1.0</a> CD release that included IBM supplied MQ Advanced <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-queue-manager-container-images#ctr_release_notes_qm__ctr-10.0.1.0-r1__title__1\" rel=\"nofollow\">10.0.1.0-r1</a> container image. </li><li>IBM MQ Operator <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-mq-operator#ctr_release_notes__operator-4.0.5__title__1\" rel=\"nofollow\">v4.0.5</a> SC2 release that included IBM supplied MQ Advanced <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-queue-manager-container-images#ctr_release_notes_qm__ctr-10.0.0.5-r2__title__1\" rel=\"nofollow\">10.0.0.5-r2</a> container image. </li><li>IBM MQ Operator <a href=\"https://www.ibm.com/docs/en/ibm-mq/9.4.x?topic=about-release-history-mq-operator#ctr_release_notes__operator-3.2.30__title__1\" rel=\"nofollow\">v3.2.30</a> SC2 release that included IBM supplied MQ Advanced <a href=\"https://www.ibm.com/docs/en/ibm-mq/9.4.x?topic=about-release-history-queue-manager-container-images#ctr_release_notes_qm__ctr-9.4.0.26-r2__title__1\" rel=\"nofollow\">9.4.0.26-r2</a> container image.</li><li>IBM MQ Container <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-queue-manager-container-images#ctr_release_notes_qm__ctr-10.0.1.0-r1__title__1\" rel=\"nofollow\">10.0.1.0-r1</a> and <a href=\"https://www.ibm.com/docs/en/ibm-mq/10.0.x?topic=about-release-history-queue-manager-container-images#ctr_release_notes_qm__ctr-10.0.0.5-r2__title__1\" rel=\"nofollow\">10.0.0.5-r2</a> release.</li></ul><p>IBM strongly recommends applying the latest container images. </p><div><div><p>IBM MQ Operator v4.1.0 CD release details:</p><div><div><div><div><div><table><tbody><tr><td><p>Image</p></td><td><p>Fix Version</p></td><td><p>Registry</p></td><td><p>Image Location</p></td></tr><tr><td><p>ibm-mq-operator</p></td><td><p>v4.1.0</p></td><td><p>icr.io</p></td><td><p>icr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127</p></td></tr><tr><td><p>ibm-mqadvanced-server</p></td><td><p>10.0.1.0-r1</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3</p></td></tr><tr><td><p>ibm-mqadvanced-server-dev</p></td><td><p>10.0.1.0-r1</p></td><td><p>icr.io</p></td><td><p>icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2</p></td></tr></tbody></table></div></div></div></div></div><p></p><p>IBM MQ Operator v4.0.5 SC2 release details:</p><div><div><div><div><div><table><tbody><tr><td><p>Image</p></td><td><p>Fix Version</p></td><td><p>Registry</p></td><td><p>Image Location</p></td></tr><tr><td><p>ibm-mq-operator</p></td><td><p>v4.0.5</p></td><td><p>icr.io</p></td><td><p>icr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930</p></td></tr><tr><td><p>ibm-mqadvanced-server</p></td><td><p>10.0.0.5-r2</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652</p></td></tr><tr><td><p>ibm-mqadvanced-server-dev</p></td><td><p>10.0.0.5-r2</p></td><td><p>icr.io</p></td><td><p>icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b</p></td></tr></tbody></table></div></div></div></div></div><p><br/>IBM MQ Operator v3.2.30 SC2 release details:</p><div><div><div><div><div><table><tbody><tr><td><p>Image</p></td><td><p>Fix Version</p></td><td><p>Registry</p></td><td><p>Image Location</p></td></tr><tr><td><p>ibm-mq-operator</p></td><td><p>v3.2.30</p></td><td><p>icr.io</p></td><td><p>icr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40</p></td></tr><tr><td><p>ibm-mqadvanced-server</p></td><td><p>9.4.0.26-r2</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8</p></td></tr><tr><td><p>ibm-mqadvanced-server-integration</p></td><td><p>9.4.0.26-r2</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad</p></td></tr><tr><td><p>ibm-mqadvanced-server-dev</p></td><td><p>9.4.0.26-r2</p></td><td><p>icr.io</p></td><td><p>icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a</p></td></tr></tbody></table></div></div></div></div><div><p></p><p>IBM MQ Container 10.0.1.0-r1 release details:</p><div><div><div><div><div><table><tbody><tr><td><p>Image</p></td><td><p>Fix Version</p></td><td><p>Registry</p></td><td><p>Image Location</p></td></tr><tr><td><p>ibm-mqadvanced-server</p></td><td><p>10.0.1.0-r1</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3</p></td></tr><tr><td><p>ibm-mqadvanced-server-dev</p></td><td><p>10.0.1.0-r1</p></td><td><p>icr.io</p></td><td><p>icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2</p></td></tr></tbody></table></div></div></div></div></div><p></p><p>IBM MQ Container 10.0.0.5-r2 release details:</p><div><div><div><div><div><table><tbody><tr><td><p>Image</p></td><td><p>Fix Version</p></td><td><p>Registry</p></td><td><p>Image Location</p></td></tr><tr><td><p>ibm-mqadvanced-server</p></td><td><p>10.0.0.5-r2</p></td><td><p>cp.icr.io</p></td><td><p>cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652</p></td></tr><tr><td><p>ibm-mqadvanced-server-dev</p></td><td><p>10.0.0.5-r2</p></td><td><p>icr.io</p></td><td><p>icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b</p></td></tr></tbody></table></div></div></div></div></div></div></div></div></div></div><div><div><p></p></div></div>"
}
]
}
],
"cpeApplicability": [
{
"operator": "OR",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.2.0",
"versionEndIncluding": "3.2.29"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.3.0",
"versionEndExcluding": "3.4.0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.4.1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.5.0:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.5.1",
"versionEndIncluding": "3.5.3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.6.0",
"versionEndIncluding": "3.6.4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.7.0",
"versionEndIncluding": "3.7.2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.8.0:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.8.1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.9.0:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.9.1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:3.9.2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:4.0.0:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:4.0.1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:4.0.2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:4.0.3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:4.0.4:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndIncluding": "2.0.29"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.4.0.6-r1",
"versionEndIncluding": "r1_9.4.0.6-r2_9.4.0.7-r1_9.4.0.10-r1_9.4.0.10-r2_9.4.0.11-r1_9.4.0.11-r2_9.4.0.11-r3_9.4.0.12-r1_9.4.0.15-r1_-_9.4.0.15-r4_9.4.0.16-r1_9.4.0.16-r2_9.4.0.17-r1_9.4.0.17-r2_9.4.0.20-r1_9.4.0.21-r1_9.4.0.21-r2_9.4.0.25-r1_-_9.4.0.25-r3_9.4.0.26-r1cd_9.4.1.0-r1_9.4.1.0-r2_9.4.1.1-r1_9.4.2.0-r1_9.4.2.0-r2_9.4.2.1-r1_9.4.2.1-r2_9.4.3.0-r1_9.4.3.0-r2_9.4.3.1-r1_-_9.4.3.1-r3_9.4.4.0-r1_-_9.4.4.0-r4_9.4.4.1-r1_9.4.5.0-r1_9.4.5.0-r2_9.4.5.1-r1_10.0.0.0-r1_-_10.0.0.0-r4_10.0.0.5-r1lts_9.3.0.0-r1_9.3.0.0-r2_9.3.0.0-r3_9.3.0.1-r1_9.3.0.1-r2_9.3.0.1-r3_9.3.0.1-r4_9.3.0.3-r1_9.3.0.4-r1_9.3.0.4-r2_9.3.0.5-r1_9.3.0.5-r2_9.3.0.5-r3_9.3.0.6-r1_9.3.0.10-r1_9.3.0.10-r2_9.3.0.11-r1_9.3.0.11-r2_9.3.0.15-r1_9.3.0.16-r1_9.3.0.16-r2_9.3.0.17-r1_9.3.0.17-r2_9.3.0.17-r3_9.3.0.20-r1_9.3.0.20-r2_9.3.0.21-r1_9.3.0.21-r2_9.3.0.21-r3_9.3.0.25-r1_9.4.0.0-r1_9.4.0.0-r2_9.4.0.0-r3_9.4.0.5-r1_9.4.0.5-r2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.7-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.12-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.4.0.15-r1",
"versionEndIncluding": "9.4.0.15-r4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.20-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.4.0.25-r1",
"versionEndIncluding": "9.4.0.25-r3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.26-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.1-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.4.3.1-r1",
"versionEndIncluding": "9.4.3.1-r3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.1-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.1-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0.0-r1",
"versionEndIncluding": "10.0.0.0-r4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:10.0.0.5-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r4:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.3-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.6-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.15-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.25-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r2:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r3:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r1:*:*:*:*:*:*:*"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r2:*:*:*:*:*:*:*"
}
]
}
]
}
]
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-10-19T18:10:50.850383Z",
"id": "CVE-2026-12670",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-10-19T18:10:58.089Z"
}
}
]
}
}