Advisories · Technology

IBM CICS TX Advanced.

Every CVE that names IBM CICS TX Advanced among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-1331 CVE record

CVSS 7.8 High

IBM CICS TX code execution
- IBM CICS TX Standard
- IBM CICS TX Advanced
- CWE-242
Not analysed yet 8 May 2025
CVE-2025-1330 CVE record

CVSS 7.8 High

IBM CICS TX code execution
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Memory corruption
Not analysed yet 8 May 2025
CVE-2025-1329 CVE record

CVSS 7.8 High

IBM CICS TX code execution
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Memory corruption
Not analysed yet 8 May 2025
CVE-2024-41746 CVE record

CVSS 7.2 High

IBM CICS TX cross-site scripting
- IBM CICS TX Advanced
- IBM CICS TX Standard
- Cross-site scripting (XSS)
Not analysed yet 16 Jan 2025
CVE-2023-38360 CVE record

CVSS 6.1 Medium

IBM CICS TX cross-site scripting
- IBM CICS TX Advanced
- Cross-site scripting (XSS)
Not analysed yet 4 Mar 2024
CVE-2023-38362 CVE record

CVSS 5.3 Medium

IBM CICS TX information disclosure
- IBM CICS TX Advanced
- CWE-204
Not analysed yet 4 Mar 2024
CVE-2022-34309 CVE record

CVSS 5.9 Medium

IBM CICS TX information disclosure
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Weak cryptography or TLS
Not analysed yet 12 Feb 2024
CVE-2022-34311 CVE record

CVSS 4.3 Medium

IBM CICS TX session fixation
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Hard-coded credentials
Not analysed yet 12 Feb 2024
CVE-2022-34310 CVE record

CVSS 5.9 Medium

IBM CICS TX information disclosure
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Weak cryptography or TLS
Not analysed yet 12 Feb 2024
CVE-2023-38361 CVE record

CVSS 5.9 Medium

IBM CICS TX Advanced information disclosure
- IBM CICS TX Advanced
- Weak cryptography or TLS
Not analysed yet 18 Nov 2023
CVE-2023-38364 CVE record

CVSS 6.1 Medium

IBM CICS TX Advanced cross-site scripting
- IBM CICS TX Advanced
- Cross-site scripting (XSS)
Not analysed yet 13 Nov 2023
CVE-2023-38363 CVE record

CVSS 4.3 Medium

IBM CICS TX information disclosure
- IBM CICS TX Advanced
Not analysed yet 13 Nov 2023
CVE-2023-43018 CVE record

CVSS 5.9 Medium

IBM CICS TX privilege escalation
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Privilege escalation
Not analysed yet 2 Nov 2023
CVE-2023-42029 CVE record

CVSS 4.8 Medium

IBM CICS TX cross-site scripting
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Cross-site scripting (XSS)
Not analysed yet 2 Nov 2023
CVE-2023-42027 CVE record

CVSS 4.3 Medium

IBM CICS TX cross-site request forgery
- IBM CICS TX Standard
- IBM CICS TX Advanced
- Cross-site request forgery (CSRF)
Not analysed yet 2 Nov 2023
CVE-2023-42031 CVE record

CVSS 4.9 Medium

IBM CICS TX denial of service
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
- Denial of service
Not analysed yet 24 Oct 2023
CVE-2023-33850 CVE record

CVSS 7.5 High

IBM GSKit-Crypto information disclosure
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
- Information disclosure
Not analysed yet 22 Aug 2023
CVE-2023-33846 CVE record

CVSS 5.4 Medium

IBM CICS TX cross-site scripting
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2023
CVE-2023-33847 CVE record

CVSS 3.7 Low

IBM CICS TX information disclosure
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
Not analysed yet 8 Jun 2023
CVE-2023-33849 CVE record

CVSS 3.7 Low

IBM CICS TX information disclosure
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
- Weak cryptography or TLS
Not analysed yet 7 Jun 2023
CVE-2023-33848 CVE record

CVSS 4.9 Medium

IBM CICS TX information disclosure
- IBM TXSeries for Multiplatforms
- IBM CICS TX Standard
- Information disclosure
Not analysed yet 7 Jun 2023
CVE-2022-34308 CVE record

CVSS 6.2 Medium

IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling.
- IBM CICS TX Standard
- IBM CICS TX Advanced
Not analysed yet 7 Oct 2022
CVE-2022-34307 CVE record

CVSS 4.3 Medium

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 1 Aug 2022
CVE-2022-34164 CVE record

CVSS 5.9 Medium

IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation.
- IBM CICS TX Standard
- IBM CICS TX Advanced
Not analysed yet 1 Aug 2022
CVE-2022-34163 CVE record

CVSS 5.4 Medium

IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
- IBM CICS TX Standard
- IBM CICS TX Advanced
Not analysed yet 1 Aug 2022
CVE-2022-34162 CVE record

CVSS 5.4 Medium

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim.
- IBM CICS TX Standard
- IBM CICS TX Advanced
Not analysed yet 1 Aug 2022
CVE-2022-34161 CVE record

CVSS 4.3 Medium

IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 1 Aug 2022
CVE-2022-33955 CVE record

CVSS 4.3 Medium

IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 1 Aug 2022
CVE-2022-34306 CVE record

CVSS 5.4 Medium

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 8 Jul 2022
CVE-2022-34167 CVE record

CVSS 5.4 Medium

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting.
- IBM CICS TX Standard
- IBM CICS TX Advanced
Not analysed yet 8 Jul 2022
CVE-2022-34166 CVE record

CVSS 5.4 Medium

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 8 Jul 2022
CVE-2022-34160 CVE record

CVSS 5.4 Medium

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 8 Jul 2022
CVE-2022-31767 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request.
- IBM CICS TX Advanced
- IBM CICS TX Standard
Not analysed yet 24 Jun 2022