Lucene search
HistoryNov 14, 2022 - 7:15 p.m.
CVE-2022-34316
ibm
cics tx
web scripting
.
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
32.6%
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
Affected configurations
Node
ibmcics_txMatch11.1advanced
ORibmcics_txMatch11.1standard
Related
ibm
ibm
cve
cve
CVE-2022-34316
2022-11-14 19:15:13
prion
prion
Code injection
2022-11-14 19:15:00
cvelist
cvelist
CVE-2022-34316 IBM CICS TX information disclosure
2022-11-14 18:47:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
32.6%
Related for NVD:CVE-2022-34316