High severity7.8NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026
CVE-2019-4294
CVE-2019-4294
Description
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*range: >=7.6.0.0,<=7.6.0.15
- cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:continuous_delivery:*:*:*range: <2018.4.1.7
- (no CPE)range: 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15
- (no CPE)range: 7.6.0.0
cpe:2.3:a:ibm:mq_appliance:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:mq_appliance:*:*:*:*:*:*:*:*range: >=8.0.0.0,<=8.0.0.12
- cpe:2.3:a:ibm:mq_appliance:*:*:*:*:continuous_delivery:*:*:*range: >=9.1.1,<=9.1.2
- cpe:2.3:a:ibm:mq_appliance:*:*:*:*:lts:*:*:*range: >=9.1.0.0,<=9.1.0.2
- (no CPE)range: 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2
- (no CPE)range: 8.0.0.3
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/docview.wssnvdVendor Advisory
- www.ibm.com/support/docview.wssnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/160701nvdBroken LinkVDB Entry
News mentions
0No linked articles in our index yet.