The vulnerability of the BIOS component of AMD processors allows a hacker to trigger a system failure.

The vulnerability of the BIOS component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the System Management Unit (SMU) component of AMD processors allows attackers to disclose protected information.

The vulnerability of the System Management Unit SMU component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Security Bulletin: IBM CICS TX Standard is vulnerable to arbitrary code execution (CVE-2022-31767)

Summary IBM CICS TX Advanced could allow a remote attacker to execute arbitrary commands. The fix removes this vulnerability CVE-2022-31767 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-31767 DESCRIPTION: IBM CICS TX could allow a remote attacker to execute arbitrary commands on...

Security Bulletin: IBM CICS TX Advanced is vulnerable to an attacker decrypting highly sensitive information . (CVE-2022-34310) .

Summary IBM CICS TX Advanced could allow an attacker to decrypt highly sensitive information . The fix removes this vulnerability CVE-2022-34310 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34310 DESCRIPTION: IBM CICS TX uses weaker than expected cryptographic algorithms that...

Security Bulletin: An HTTP header injection vulnerability in IBM WebSphere Application Server Liberty (CCVE-2022-34165) affects IBM CICS TX Advanced

Summary An HTTP header injection vulnerability exists in IBM WebSphere Application Server Liberty used by IBM CICS TX Advanced . IBM CICS TX Advanced has addressed the vulnerability CCVE-2022-34165. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0,...

Security Bulletin: IBM CICS TX Advanced is vulnerable to information disclosure due to IBM WebSphere Application Server Liberty (CVE-2022-22393)

Summary WebSphere Application Server Liberty is used by IBM CICS TX Advanced to provide a web based administration console. The fix removes the information disclosure vulnerability CVE-2022-22393 from Liberty. Vulnerability Details CVEID:CVE-2022-22393 DESCRIPTION: IBM WebSphere Application Serve...

Security Bulletin: A vulnerability (CVE-2021-35603) in Java SE affects IBM CICS TX Advanced

Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The fix removes vulnerability CVE-2021-35603 that allows an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact...

Security Bulletin: IBM CICS TX Advanced is vulnerable to a remote attacker hijacking the clicking action of a victim (CVE-2022-34162).

Summary IBM CICS TX could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. The...

Security Bulletin: IBM CICS TX Advanced is vulnerable to several no confidentiality exposures due to IBM SDK, Java Technology Edition

Summary IBM SDK, Java Technology Edition is used by CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications. The fix removes the no confidentiality exposure vulnerabilities CVE-2022-21496, CVE-2022-21434 and CVE-2022-21443 from IBM SDK, JTE. Vulnerability Details...

Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing a remote attacker to bypass security restrictions (CVE-2021-41041).

Summary IBM CICS TX Advanced could allow a remote attacker to bypass security restrictions. The fix removes this vulnerability CVE-2021-41041 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2021-41041 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...

Security Bulletin: IBM CICS TX Advanced is vulnerable to identity spoofing due to IBM WebSphere Application Server Liberty (CVE-2022-22475)

Summary WebSphere Application Server Liberty is used by IBM CICS TX Advanced to provide a web based administration console. The fix removes the identity spoofing vulnerability CVE-2022-232475 from Liberty. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server...

Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.

Summary IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes. The fix removes these vulnerabilities from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2018-17847 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by an index out of...

Security Bulletin: Multiple vulnerabilities in Java SE affect IBM CICS TX Advanced

Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The following CVEs are applicable: Denial of service CVEs - CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21294,...

Security Bulletin: IBM CICS TX Advanced is vulnerable to HTML injection (CVE-2022-34160)

Summary IBM CICS TX Advanced could allow a remote attacker to inject malicious HTML code. The fix removes this vulnerability CVE-2022-33960 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34160 DESCRIPTION: IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A...

Security Bulletin: A vulnerability (CVE-2021-35550) in Java SE affects IBM CICS TX Advanced

Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The fix removes vulnerability CVE-2021-35550 that allows an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality impact...

Security Bulletin: IBM CICS TX Advanced is vulnerable to a cross-site scripting attack (CVE-2022-34315).

Summary IBM CICS TX Advanced could allow a cross-site scripting vulnerability to be exposed. The fix removes this vulnerability CVE-2022-34315 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34315 DESCRIPTION: IBM CICS TX is vulnerable to cross-site scripting. This vulnerability...

Security Bulletin: Vulnerabilites CVE-2018-25031 and CVE-2021-46708 in WebSphere Application Server Liberty affect IBM CICS TX Advanced

Summary WebSphere Application Server Liberty is used by IBM CICS TX Advanced to provide a web based administration console and to provide web services support. The fix removes vulnerabilities CVE-2018-25031 that allows a remote attacker to conduct spoofing attacks and CVE-2021-46708 that allows a...

Security Bulletin: IBM CICS TX Advanced is vulnerable to a denial of service exposure due to IBM SDK, Java Technology Edition

Summary IBM SDK, Java Technology Edition is used by CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications. The fix removes the denial of service vulnerability CVE-2022-21299 from IBM SDK, JTE. Vulnerability Details CVEID:CVE-2022-21299 DESCRIPTION: An unspecifi...

Security Bulletin: IBM CICS TX Advanced is vulnerable to attack because it uses weak crytopgraphic algorithms (CVE-2022-34320).

Summary IBM CICS TX Advanced could allow an attack because it uses weak crytopgraphic algorithms. The fix removes this vulnerability CVE-2022-34320 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34320 DESCRIPTION: IBM CICS TX uses weaker than expected cryptographic algorithms tha...

Security Bulletin: IBM CICS TX Advanced is vulnerable to attackers being able to get cookie values (CVE-2022-34307).

Summary IBM CICS TX could allow attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. The fix...