CVE-2018-1503: IBM WebSphere Mq

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer be transmitted via the affected channel. IBM X-Force ID: 141339.

Affected products

• IBM WebSphere Mq: from 7.5.0.0, up to and including 7.5.0.8; from 8.0.0.0, up to and including 8.0.0.9; from 9.0.0.0, up to and including 9.0.0.3

Published 2018-07-23. Last modified 2026-06-17.