Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

13 records in Txseries For Multiplatforms · all components

Priority MEDIUM 40

IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connections due to improper allocation of resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00654 Published 2025-01-19 No fix listed CWE-770
Priority MEDIUM 40

IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0078 Published 2025-01-19 No fix listed CWE-770
Priority LOW 39

IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0042 Published 2025-04-02 No fix listed CWE-644
TI-2023-22397 CVE-2023-42027 · GHSA-xrfm-hp6c-68p3

IBM CICS TX cross-site request forgery

Priority LOW 38

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions trans…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00343 Published 2023-11-02 No fix listed CWE-352
Priority LOW 37

IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00178 Published 2025-04-02 No fix listed CWE-352
Priority LOW 30

IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login attempt response discrepancy.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2025-04-02 No fix listed CWE-204
Priority LOW 30

IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00314 Published 2024-11-01 No fix listed CWE-208
TI-2023-16724 CVE-2023-33848 · GHSA-g86w-p7pq-ffvq

IBM CICS TX information disclosure

Priority LOW 30

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00795 Published 2023-06-07 No fix listed CWE-200
Priority LOW 26

IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00344 Published 2024-11-01 No fix listed CWE-598
TI-2023-22399 CVE-2023-42031 · GHSA-8f2j-r3g9-qhmm

IBM CICS TX denial of service

Priority LOW 25

IBM TXSeries for Multiplatforms, 8.1, 8.2, and 9.1, CICS TX Standard CICS TX Advanced 10.1 and 11.1 could allow a privileged user to cause a denial of service due to uncontrolled resource consumption.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01259 Published 2023-10-24 No fix listed CWE-400
TI-2023-22398 CVE-2023-42029 · GHSA-272j-mppr-v33q

IBM CICS TX cross-site scripting

Priority LOW 25

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2023-11-02 No fix listed CWE-79
Priority LOW 24

IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00236 Published 2025-04-02 No fix listed CWE-79
TI-2023-16725 CVE-2023-33849 · GHSA-7wpg-p8mw-fq9g

IBM CICS TX information disclosure

Priority LOW 18

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00379 Published 2023-06-07 No fix listed CWE-311
Open these records in search →