Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-36100

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.

  • Published: Sep 7, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-36100
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.1
  • AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

No affected software listed.