CVE-2025-23225

MEDIUM
Published Feb 28, 2025 Modified Jul 3, 2025 CWE-230

Description

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

Is your site exposed to CVE-2025-23225?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-230 CWE-230

Affected Products

Vendor Product
ibm mq_appliance
ibm mq_appliance
ibm mq_appliance

References

Frequently Asked Questions

What is CVE-2025-23225? +
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue. It has a CVSS v3.1 base score of 6.5 (MEDIUM).
How severe is CVE-2025-23225? +
CVE-2025-23225 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2025-23225? +
CVE-2025-23225 affects products from ibm, specifically: mq_appliance. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-23225? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-10508 9.8

The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account …
CVE-2024-11024 9.8

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions …
CVE-2024-0208 7.8

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection …
CVE-2024-0048 7.8

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null …
CVE-2024-9781 7.8

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection …
CVE-2026-25659 6.5

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-23225 — free, no signup required.