Lucene search

IBM02315A4799FC830315881FEC503A624D33D925A2F8B094E102E565D76992BA8E

HistoryFeb 14, 2023 - 9:14 p.m.

Security Bulletin: IBM CICS TX Standard is vulnerable to a cross-site scripting attack (CVE-2022-34315).

2023-02-1421:14:53

www.ibm.com

ibm cics tx

cross-site scripting

vulnerability

web ui

credentials disclosure

ibm cloud

fix

download fix

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.6%

JSON

Summary

IBM CICS TX Standard could allow a cross-site scripting vulnerability to be exploited. The fix removes this vulnerability (CVE-2022-34315) from IBM CICS TX Standard.

Vulnerability Details

CVEID:CVE-2022-34315
**DESCRIPTION:**IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/229451 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM CICS TX Standard	All

Remediation/Fixes

Product |

Version

Defect

Remediation / First Fix

—|—|—|—

IBM CICS TX Standard

11.1

127919

| Download fix here

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmcics_txMatchanystandard

VendorProductVersionCPE
ibmcics_txanycpe:2.3:a:ibm:cics_tx:any:*:*:*:standard:*:*:*

Vendor	Product	Version	CPE
ibm	cics_tx	any	cpe:2.3:a:ibm:cics_tx:any::::standard:::