CVE-2025-1331 IBM CICS TX code execution

🗓️ 08 May 2025 21:55:41Reported by ibmType

Vulnerability in IBM CICS TX allows local code execution via unsafe gets function in versions 10.1 and 11.1.

Reporter	Title	Published	Views	Family All 14
IBM Security Bulletins	Security Bulletin: IBM TX Standard is affected by an Out-of-bounds Write vulnerability and by a Use of Inherently Dangerous Function vulnerability due to the way that the product uses certain C library functions.	8 May 202516:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM TX Advanced is affected by an Out-of-bounds Write vulnerability and by a Use of Inherently Dangerous Function vulnerability due to the way that the product uses certain C library functions.	8 May 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM TXSeries for Multiplatforms is affected by an Out-of-bounds Write vulnerability and by a Use of Inherently Dangerous Function vulnerability due to the way that the product uses certain C library functions.	8 May 202516:30	–	ibm
ATTACKERKB	CVE-2025-1331	8 May 202522:15	–	attackerkb
Circl	CVE-2025-1331	8 May 202522:25	–	circl
CNNVD	IBM CICS TX Standard 安全漏洞	8 May 202500:00	–	cnnvd
CNVD	IBM CICS TX gets code execution vulnerability	12 May 202500:00	–	cnvd
CVE	CVE-2025-1331	8 May 202521:55	–	cve
EUVD	EUVD-2025-14053	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1331	8 May 202522:15	–	nvd

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:cics_tx:11.1.0.0:*:*:*:standard:linux:*:*"
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "CICS TX Standard",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.1"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:cics_tx:10.1.0.0:*:*:*:advanced:linux:*:*",
      "cpe:2.3:a:ibm:cics_tx:11.1.0.0:*:*:*:advanced:linux:*:*"
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "CICS TX Advanced",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.1"
      },
      {
        "status": "affected",
        "version": "11.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7232923
ibm	www.ibm.com/support/pages/node/7232924

28 Aug 2025 14:19Current

CVSS 3.17.8

EPSS0.00042

CWE-242