CVE-2025-23225: IBM Mq Appliance

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

Affected products

• IBM Mq Appliance: up to and including 9.4.2; from 9.3.0.0, up to and including 9.3.0.27; from 9.4.0.0, up to and including 9.4.0.10

Published 2025-02-28. Last modified 2026-06-17.