IBM9AAF2E8C117B2F008D7C07E6BEAACA4B1E9436B36E142174184AD34A029D007ASecurity Bulletin: "Cross Site Scripting" affects IBM CICS TX Standard and IBM CICS TX Advanced
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
20.4%
Summary
“Cross Site Scripting” affects IBM CICS TX Standard and IBM CICS TX Advanced. IBM CICS TX Standard and IBM CICS TX Advanced have addressed the applicable vulnerability.
Vulnerability Details
CVEID:CVE-2023-42029
**DESCRIPTION:**IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Base score: 4.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/266059 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM CICS TX Advanced | 10.1 |
| IBM CICS TX Advanced | 11.1 |
| IBM CICS TX Standard | 11.1 |
Remediation/Fixes
| Product | Version | Platform | Remediation / Fix |
|---|---|---|---|
| IBM CICS TX Advanced |
10.1
| Linux| Fix Central Link
IBM CICS TX Advanced|
11.1
| Linux| Fix Central Link
IBM CICS TX Standard|
11.1
| Linux| Fix Central Link
Workarounds and Mitigations
None
Affected configurations
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
20.4%