IBM CICS TX Advanced
33 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-1331 | 10.1 ; 11.1 | IBM CICS TX code execution | HIGH 7.8 | 0.3 % | ||
| CVE-2025-1330 | 10.1 ; 11.1 | IBM CICS TX code execution | HIGH 7.8 | 0.3 % | ||
| CVE-2025-1329 | 10.1 ; 11.1 | IBM CICS TX code execution | HIGH 7.8 | 0.3 % | ||
| CVE-2024-41746 | 10.1, 11.1 | IBM CICS TX cross-site scripting | HIGH 7.2 | 0.2 % | ||
| CVE-2023-38360 | 10.1 | IBM CICS TX cross-site scripting | MEDIUM 6.1 | 0.3 % | ||
| CVE-2023-38362 | 10.1 | IBM CICS TX information disclosure | MEDIUM 5.3 | 0.5 % | ||
| CVE-2022-34309 | 11.1 | IBM CICS TX information disclosure | HIGH 7.5 | 0.5 % | ||
| CVE-2022-34311 | 11.1 | IBM CICS TX session fixation | MEDIUM 4.3 | 0.4 % | ||
| CVE-2022-34310 | 11.1 | IBM CICS TX information disclosure | HIGH 7.5 | 0.5 % | ||
| CVE-2023-38361 | 10.1 | IBM CICS TX Advanced information disclosure | HIGH 7.5 | 0.4 % | ||
| CVE-2023-38364 | 10.1 | IBM CICS TX Advanced cross-site scripting | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-38363 | 10.1 | IBM CICS TX information disclosure | MEDIUM 4.3 | 0.6 % | ||
| CVE-2023-43018 | 10.1, 11.1 | IBM CICS TX privilege escalation | HIGH 7.5 | 0.4 % | ||
| CVE-2023-42029 | 10.1, 11.1 | IBM CICS TX cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-42027 | 10.1, 11.1 | IBM CICS TX cross-site request forgery | HIGH 8.8 | 0.3 % | ||
| CVE-2023-42031 | 10.1, 11.1 | IBM CICS TX denial of service | MEDIUM 4.9 | 1.3 % | ||
| CVE-2023-33850 | 10.1, 11.1 | IBM GSKit-Crypto information disclosure | HIGH 7.5 | 1.2 % | ||
| CVE-2023-33846 | 10.1, 11.1 | IBM CICS TX cross-site scripting | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-33847 | 10.1, 11.1 | IBM CICS TX information disclosure | LOW 3.7 | 0.6 % | ||
| CVE-2023-33849 | 10.1, 11.1 | IBM CICS TX information disclosure | LOW 3.7 | 0.4 % | ||
| CVE-2023-33848 | 10.1, 11.1 | IBM CICS TX information disclosure | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-34308 | 11.1 | IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437. | MEDIUM 6.2 | 0.2 % | ||
| CVE-2022-34307 | 11.1 | IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie value | MEDIUM 4.3 | 0.6 % | ||
| CVE-2022-34164 | 11.1 | IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338. | MEDIUM 5.9 | 0.2 % | ||
| CVE-2022-34163 | 11.1 | IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an att | MEDIUM 6.1 | 0.7 % | ||
| CVE-2022-34162 | 11.1 | IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web | MEDIUM 6.1 | 0.9 % | ||
| CVE-2022-34161 | 11.1 | IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions tra | HIGH 8.8 | 0.5 % | ||
| CVE-2022-33955 | 11.1 | IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. IBM X | MEDIUM 6.8 | 0.6 % | ||
| CVE-2022-34306 | 11.1 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. T | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-34167 | 11.1 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Java | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-34166 | 11.1 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-34160 | 11.1 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewe | MEDIUM 5.4 | 1.1 % | ||
| CVE-2022-31767 | 11.1 | IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially craf | CRITICAL 9.8 | 4.8 % |