979 matches found
CVE-2022-38705 IBM CICS TX phishing
IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...
CVE-2022-38705
IBM CICS TX 11.1 Standard and Advanced are affected by CVE-2022-38705 due to a reverse tabnabbing flaw that could let a remote attacker bypass security restrictions and redirect users to phishing sites. Affected products include IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1). The IBM s...
CVE-2022-34312
CVE-2022-34312 affects IBM CICS TX 11.1. The vulnerability allows web pages to be stored locally and read by another user on the same system, constituting an information disclosure. Affected products include IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1). The issue’s base metrics show ...
IBM CICS TX 加密问题漏洞
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. IBM CICS TX version 11.1 is vulnerable to an encryption issue that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt...
IBM CICS TX 跨站脚本漏洞
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX version 11.1 that stems from vulnerability to cross-site scripting...
PT-2022-22126 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: Fo...
IBM DB2 Denial of Service Vulnerability (CNVD-2022-78139)
IBM DB2 is a relational database management system from International Business Machines IBM of the United States. The system is implemented in UNIX, Linux, IBMi, z/OS, and Windows server versions.A denial-of-service vulnerability exists in IBM DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5. An...
CVE-2022-34308
IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437...
Input validation
IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437...
CVE-2022-34308
The CVE-2022-34308 entry relates to IBM CICS TX 11.1 and describes a local user denial-of-service due to improper load handling. Connected IBM security bulletins confirm affected products and versions: IBM CICS TX Standard and IBM CICS TX Advanced both list 11.1 as affected, with remediation stat...
PT-2022-22119 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows a local user to cause a denial of service due to improper load handling. Recommendations: For IBM CICS TX version 11.1, at the moment, there is no information about a newer version that...
Privilege escalation
A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...
CVE-2021-25657: Improper Privilege Management
A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...
Avaya IP Office 安全漏洞
Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. A security vulnerability exists in Avaya IP Office 11.1 FP2 SP1 and prior versions, which stems from Admin Lite and USB Creator allowing local users to elevate privileges...
CVE-2021-41784
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled...
IBM CICS TX Cross-Site Request Forgery Vulnerability
IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA, Inc. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 contains a security vulnerability that stems from a lack of authentication measures or...
IBM CICS TX Advanced Input Validation Error Vulnerability
IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 contains an input validation error vulnerability that stems from improper input validation of the...
CVE-2022-34307
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...