Read the docs
TI-2025-01140 Aliases CVE-2025-1329GHSA-x2q5-6m88-47fh

IBM CICS TX code execution

Priority LOW 36CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00279 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMCICS TX Standard11.1—No fix listedCNA
IBMCICS TX Advanced10.1; 11.1—No fix listedCNA
  • CICS TX Standard VendorIBM Affected 11.1 Fixed in — No fix listed CNA
  • CICS TX Advanced VendorIBM Affected 10.1; 11.1 Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:ibm:cics_tx:11.1.0.0:-:*:*:standard:*:*:*11.1.0.0VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_1:*:*:standard:*:*:*11.1.0.0 interim_fix_1VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_10:*:*:standard:*:*:*11.1.0.0 interim_fix_10VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_11:*:*:standard:*:*:*11.1.0.0 interim_fix_11VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_12:*:*:standard:*:*:*11.1.0.0 interim_fix_12VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_13:*:*:standard:*:*:*11.1.0.0 interim_fix_13VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_14:*:*:standard:*:*:*11.1.0.0 interim_fix_14VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_15:*:*:standard:*:*:*11.1.0.0 interim_fix_15VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_16:*:*:standard:*:*:*11.1.0.0 interim_fix_16VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_17:*:*:standard:*:*:*11.1.0.0 interim_fix_17VulnerableIBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:-:*:*:standard:*:*:* Versions 11.1.0.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_1:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_10:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_10 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_11:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_11 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_12:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_12 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_13:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_13 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_14:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_14 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_15:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_15 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_16:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_16 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_17:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_17 Vulnerable ·IBM
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_18:*:*:standard:*:*:*11.1.0.0 interim_fix_18VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_19:*:*:standard:*:*:*11.1.0.0 interim_fix_19VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_2:*:*:standard:*:*:*11.1.0.0 interim_fix_2VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_20:*:*:standard:*:*:*11.1.0.0 interim_fix_20VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_21:*:*:standard:*:*:*11.1.0.0 interim_fix_21VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_22:*:*:standard:*:*:*11.1.0.0 interim_fix_22VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_23:*:*:standard:*:*:*11.1.0.0 interim_fix_23VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_24:*:*:standard:*:*:*11.1.0.0 interim_fix_24VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_3:*:*:standard:*:*:*11.1.0.0 interim_fix_3VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_4:*:*:standard:*:*:*11.1.0.0 interim_fix_4VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_5:*:*:standard:*:*:*11.1.0.0 interim_fix_5VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_6:*:*:standard:*:*:*11.1.0.0 interim_fix_6VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_7:*:*:standard:*:*:*11.1.0.0 interim_fix_7VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_8:*:*:standard:*:*:*11.1.0.0 interim_fix_8VulnerableIBM
cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_9:*:*:standard:*:*:*11.1.0.0 interim_fix_9VulnerableIBM
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_18:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_18 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_19:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_19 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_2:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_20:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_20 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_21:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_21 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_22:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_22 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_23:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_23 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_24:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_24 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_3:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_3 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_4:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_4 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_5:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_6:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_6 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_7:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_7 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_8:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_8 Vulnerable ·IBM
  • cpe:2.3:a:ibm:cics_tx:11.1.0.0:interim_fix_9:*:*:standard:*:*:* Versions 11.1.0.0 interim_fix_9 Vulnerable ·IBM
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    IBM CICS TX Advanced, CICS TX Standard — ibm.com/support/pages/node/7232923

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    Show all 3 records → Advisory →
  • Advisory ·

    IBM CICS TX Advanced, CICS TX Standard — ibm.com/support/pages/node/7232924

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    Show all 3 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-1329
  2. 2026-10-03 Alias added: GHSA-x2q5-6m88-47fh

References

Patch 2

  • TI-2022-13662 OS command injection in IBM CICS TX Advanced CVSS 3.1CRITICAL 9.8
  • TI-2023-16726 IBM GSKit-Crypto information disclosure CVSS 3.1HIGH 7.5
  • TI-2022-15077 Cross-site request forgery in IBM CICS TX Advanced CVSS 3.1HIGH 8.8
  • TI-2023-22397 IBM CICS TX cross-site request forgery CVSS 3.1HIGH 8.8
  • TI-2024-27804 IBM CICS TX cross-site scripting CVSS 3.1HIGH 7.2
  • TI-2024-27802 IBM CICS TX Standard cross-site request forgery CVSS 3.1HIGH 8.8
See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences