CVE-2025-1333

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-214
Published: 2025-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:mq_operator
ibm:supplied_mq_advanced_container_images

References

https://www.ibm.com/support/pages/node/7232272

Check your stack JSON