CVE-2018-1883

A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service…

5.3MediumCVSS base score
2.4%Exploitation in 30 daysEPSS · top 16% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service attack preventing users from logging into the MQ Console REST API. IBM X-Force ID: 151969.

Timeline

2017
13 Dec 2017
13 Dec 2017
ID reserved
By ibm
2018
7 Dec 201812 months later
7 Dec 2018· 12 months later
Published
2024
16 Sept 20246 years later
16 Sept 2024· 6 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2018-1883, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium5.3	CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified	3.0	High7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 2.4% · top 16% of all CVEs (9 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Affected products

IBM · MQ
- affected 9.0.2
- affected 9.0.3
- affected 9.0.4
- affected 9.0.5
- affected 9.1.0.0

References

ibm-websphere-cve20181883-dos(151969) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
https://www.ibm.com/support/docview.wss?uid=ibm10738197 (opens in a new tab)x_refsource_CONFIRMx_transferred
106146 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1883](https://cveledger.app/badge/CVE-2018-1883.svg)](https://cveledger.app/cve/CVE-2018-1883)

Record last updated 16 Sept 2024, 22:13 UTC.