Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-12700
HistoryMar 06, 2024 - 12:00 a.m.

IBM CICS TX Advanced Cross-Site Scripting Vulnerability (CNVD-2024-12700)

2024-03-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
ibm cics
cross-site scripting
vulnerability
web script
html
injection
security

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

IBM CICS TX Advanced is a transaction processing monitoring system from International Business Machines (IBM) for running large-scale, high-transaction-volume applications in enterprise environments. A cross-site scripting vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CNVD-2024-12700