High severity · published Feb 28, 2025
CVE-2025-0975
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
MQ Appliance · Ibm
9.3.0 through 9.4.2; 9.3.0.0 through 9.3.0.27; 9.4.0.0 through 9.4.0.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0975
Vendor Advisory
https://www.ibm.com/support/pages/node/7183467
More from MQ Appliance
10.0
CVE-2026-10747
IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
9.8
CVE-2020-4682
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data
8.8
CVE-2024-40681
IBM MQ security bypass
8.8
CVE-2020-4938
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…
8.8
CVE-2017-1318
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution