CVE-2018-1974: IBM WebSphere Mq

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915.

Affected products

• IBM WebSphere Mq: from 8.0.0.0, up to and including 8.0.0.10; from 9.0.0.0, up to and including 9.0.0.5; from 9.1.0.0, up to and including 9.1.1

Published 2019-03-11. Last modified 2026-06-17.