« Volver al listado

CVE-2015-2013

Estado: ModificadaMedia (5)—

IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service (channel-agent abend and process outage) via a crafted selection string in an MQI call.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Websphere MQ

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-2013",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-09-14T01:59:00.107",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV73860",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962479",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1033449",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV73860",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962479",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1033449",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service (channel-agent abend and process outage) via a crafted selection string in an MQI call."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en IBM WebSphere MQ 7.0.1 en versiones anteriores a 7.0.1.13, permite a atacantes remotos causar una denegación de servicio (terminación anormal canal-agente e interrupción del proceso) a través de una cadena de selección manipulada en una llamada MQI."
    }
  ],
  "lastModified": "2026-06-17T00:23:27.150",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6E60ABB-E703-4745-98F3-22609FF70F6F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDC03B4D-98C2-4704-9BF9-47888489B9C7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73E4EAA2-8842-41AB-B8E0-944CDF72C893"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D71A8D2-C97E-4A0D-B4F7-19E0B24AC887"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "362B6A59-1FFD-4C11-8F86-0A5516A36385"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5046C962-98D9-43C3-8D83-B144CE442A31"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A379F4E4-5A82-454A-B1D0-D4CAAD9E1457"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DECB8B77-BAB7-468E-8D22-57FE9F42F718"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CE2BBC9-7772-48FF-BDE5-D61F9E16BB0D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E3E613F-20C4-448E-99C7-C03587B2AE4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC348B63-F62A-4F23-8BFC-EC6FDA057DA1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A3E5E8C-E897-4720-8B79-3D670B3A3CA0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41B533BC-8796-4ADA-B67D-0CA41CD8BA65"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}