Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

46 records in Cics Tx · all components

TI-2022-13662 CVE-2022-31767 · GHSA-9g73-3qvv-vx92

OS command injection in IBM CICS TX Advanced

Priority MEDIUM 50

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04804 Published 2022-06-24 No fix listed CWE-78
TI-2023-16726 CVE-2023-33850 · GHSA-xxxm-cq2q-5v69

IBM GSKit-Crypto information disclosure

Priority MEDIUM 41

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0117 Published 2023-08-22 No fix listed CWE-203
Priority LOW 39

IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00477 Published 2022-08-01 No fix listed CWE-352
TI-2023-22397 CVE-2023-42027 · GHSA-xrfm-hp6c-68p3

IBM CICS TX cross-site request forgery

Priority LOW 38

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions trans…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00343 Published 2023-11-02 No fix listed CWE-352
TI-2024-27804 CVE-2024-41746 · GHSA-fhcf-5gx2-w6p5

IBM CICS TX cross-site scripting

Priority LOW 37

IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00243 Published 2025-01-16 No fix listed CWE-79
Priority LOW 37

IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00207 Published 2024-11-01 No fix listed CWE-352
TI-2025-01142 CVE-2025-1331 · GHSA-78qc-93vm-f29v

IBM CICS TX code execution

Priority LOW 36

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2025-05-08 No fix listed CWE-242
TI-2025-01141 CVE-2025-1330 · GHSA-m2hj-xmpv-m3qq

IBM CICS TX code execution

Priority LOW 36

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2025-05-08 No fix listed CWE-787
TI-2025-01140 CVE-2025-1329 · GHSA-x2q5-6m88-47fh

IBM CICS TX code execution

Priority LOW 36

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2025-05-08 No fix listed CWE-787
TI-2022-15231 CVE-2022-34320 · GHSA-7hmx-q6g5-9hwx

IBM CICS TX information disclosure

Priority LOW 34

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00549 Published 2022-11-14 No fix listed CWE-327
TI-2022-15230 CVE-2022-34319 · GHSA-5f74-2734-278c

IBM CICS TX information disclosure

Priority LOW 34

IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00539 Published 2022-11-14 No fix listed CWE-327
TI-2023-23053 CVE-2023-43018 · GHSA-jp5h-5fjw-cp86

IBM CICS TX privilege escalation

Priority LOW 33

IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2023-11-02 No fix listed CWE-250
TI-2023-19751 CVE-2023-38361 · GHSA-7qpw-c44q-vhhg

IBM CICS TX Advanced information disclosure

Priority LOW 33

IBM CICS TX Advanced 10.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2023-11-18 No fix listed CWE-327
TI-2022-15221 CVE-2022-34310 · GHSA-mjxx-fv7p-2x47

IBM CICS TX information disclosure

Priority LOW 33

IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00486 Published 2024-02-12 No fix listed CWE-327
TI-2022-15220 CVE-2022-34309 · GHSA-8743-m96c-xpvr

IBM CICS TX information disclosure

Priority LOW 33

IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00486 Published 2024-02-12 No fix listed CWE-327
TI-2023-19752 CVE-2023-38362 · GHSA-q5p6-rx6m-vx4m

IBM CICS TX information disclosure

Priority LOW 31

IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00624 Published 2024-03-04 No fix listed CWE-204
TI-2022-14954 CVE-2022-33955 · GHSA-8m66-7mgh-4hjx

OS command injection in IBM CICS TX Advanced

Priority LOW 31

IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00561 Published 2022-08-01 No fix listed CWE-78
TI-2023-16724 CVE-2023-33848 · GHSA-g86w-p7pq-ffvq

IBM CICS TX information disclosure

Priority LOW 30

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00795 Published 2023-06-07 No fix listed CWE-200
TI-2022-18238 CVE-2022-38705 · GHSA-5wp4-jcwc-hj35

IBM CICS TX phishing

Priority LOW 29

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00752 Published 2022-11-14 No fix listed
TI-2022-15079 CVE-2022-34163 · GHSA-23x2-rwgc-35fv

Cross-site scripting in IBM CICS TX Standard

Priority LOW 29

IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2022-08-01 No fix listed CWE-79
TI-2022-15078 CVE-2022-34162 · GHSA-8crc-xm4w-hr72

Clickjacking in IBM CICS TX Standard

Priority LOW 29

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00888 Published 2022-08-01 No fix listed CWE-1021
TI-2023-19754 CVE-2023-38364 · GHSA-8r76-cfm8-jm4r

IBM CICS TX Advanced cross-site scripting

Priority LOW 28

IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00511 Published 2023-11-13 No fix listed CWE-79
TI-2022-15229 CVE-2022-34318 · GHSA-323q-3h7w-jpg8

IBM CICS TX clickjacking

Priority LOW 28

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00693 Published 2022-11-14 No fix listed CWE-1021
TI-2024-27803 CVE-2024-41745 · GHSA-7v6m-5xcw-rjqw

IBM CICS TX Standard cross-site scripting

Priority LOW 27

IBM CICS TX Standard is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2024-11-01 No fix listed CWE-79
TI-2023-19750 CVE-2023-38360 · GHSA-q75g-5wxh-jxg8

IBM CICS TX cross-site scripting

Priority LOW 27

IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2024-03-04 No fix listed CWE-79
Load more
Open these records in search →