Vulnerability Database

319,561

Total vulnerabilities in the database

CVE-2025-36100

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.

  • Published: Sep 7, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-36100
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.1
  • AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
ibm / mq 9.1.0.0 9.1.0.31
ibm / mq 9.2.0.0 9.2.0.37
ibm / mq 9.3.0.0 9.3.0.31
ibm / mq 9.3.0.0 9.3.5.1.x
ibm / mq 9.4.0.0 9.4.0.15
ibm / mq 9.4.0.0 9.4.3.1