Lucene search
+L

557 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 9:51 p.m.18 views

Security Bulletin: There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced (CVE-2024-40094).

Summary There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced CVE-2024-40094. An update to IBM CICS TX Advanced has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2024-40094 DESCRIPTION: GraphQL Java aka...

5.3CVSS7AI score0.00943EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 9:51 p.m.20 views

Security Bulletin: There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM CICS TX Standard (CVE-2024-40094).

Summary There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM CICS TX Standard CVE-2024-40094. An update to IBM CICS TX Standard has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2024-40094 DESCRIPTION: GraphQL Java aka...

5.3CVSS7AI score0.00943EPSS
SaveExploits2Affected Software1
CNVD
CNVD
added 2025/01/23 12:00 a.m.73 views

IBM CICS TX Advanced Cross-Site Scripting Vulnerability (CNVD-2025-02532)

IBM CICS TX Advanced is a transaction processing monitoring system from International Business Machines IBM for running large-scale, high-transaction-volume applications in enterprise environments. IBM CICS TX Advanced suffers from a cross-site scripting vulnerability that stems from the...

7.2CVSS6.2AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 6:15 p.m.59 views

CVE-2024-41746

IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

7.2CVSS0.00237EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/16 6:15 p.m.20 views

CVE-2024-41746

IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS5.5AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 5:13 p.m.56 views

CVE-2024-41746 IBM CICS TX cross-site scripting

IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

7.2CVSS0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 5:13 p.m.13 views

CVE-2024-41746 IBM CICS TX cross-site scripting

IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

7.2CVSS6.1AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 5:13 p.m.69 views

CVE-2024-41746

CVE-2024-41746 affects IBM CICS TX Advanced 10.1 and 11.1, and IBM CICS TX Standard 11.1. The Red Hat/IBM and CVE records consistently describe a stored cross-site scripting flaw in the Web UI that enables embedding of arbitrary JavaScript, potentially altering functionality and leading to creden...

7.2CVSS6.3AI score0.00237EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/12 9:33 a.m.33 views

Security Bulletin: Security vulnerabilities may affect IBM Java shipped with IBM CICS TX Standard.

Summary Security vulnerabilities may affect IBM Java shipped with IBM CICS TX Standard. Updates to IBM CICS TX Standard have been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2024-21145 DESCRIPTION: An unspecified vulnerability in Java SE related to the 2D component...

4.8CVSS5.6AI score0.01056EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/12 9:28 a.m.28 views

Security Bulletin: Security vulnerabilities may affect IBM Java shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect IBM Java shipped with IBM CICS TX Advanced. Updates to IBM CICS TX Advanced have been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2024-21145 DESCRIPTION: An unspecified vulnerability in Java SE related to the 2D component...

4.8CVSS5.6AI score0.01056EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/12 9:24 a.m.16 views

Security Bulletin: A security vulnerability may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Standard.

Summary A security vulnerability may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Standard. An update to IBM CICS TX Standard has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liber...

7.5CVSS7.3AI score0.00257EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/12 9:15 a.m.34 views

Security Bulletin: A security vulnerability may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced.

Summary A security vulnerability may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced. An update to IBM CICS TX Advanced has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liber...

7.5CVSS7.5AI score0.00257EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/11 9:36 a.m.20 views

Security Bulletin: Security vulnerability due to Apache Derby package shipped with IBM CICS TX Standard

Summary Security vulnerability due to Apache Derby package shipped with IBM CICS TX Standard. The Apache Derby package version has been updated. Vulnerability Details CVEID:CVE-2022-46337 DESCRIPTION: Apache Derby could allow a remote attacker to bypass security restrictions, caused by a LDAP...

9.8CVSS7.1AI score0.01418EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/04 1:40 p.m.17 views

Security Bulletin: IBM CICS TX Advanced web pages are vulnerable to cross-site scripting and cross-site request forgery attacks.

Summary Webpages that are shipped as part of IBM CICS TX Advanced are vulnerable to cross-site scripting and cross-site request forgery attacks. Updates to IBM CICS TX Advanced have been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2024-41745 DESCRIPTION: IBM CICS TX...

8.8CVSS6.9AI score0.00265EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2024/11/04 12:00 a.m.46 views

IBM CICS TX Standard Web UI Cross-Site Scripting Vulnerability

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. A cross-site scripting vulnerability exists in IBM CICS TX Standard version 11.1, which stems from...

6.1CVSS6.2AI score0.00265EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/04 12:00 a.m.44 views

IBM CICS TX Standard Web UI Cross-Site Request Forgery Vulnerability

IBM CICS TX Standard is a comprehensive single-transaction runtime package from International Business Machines IBM that provides a cloud-native deployment model for standalone applications. A cross-site request forgery vulnerability exists in the IBM CICS TX Standard Web UI, which can be exploit...

8.8CVSS6.6AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 5:15 p.m.33 views

CVE-2024-41745

IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS0.00265EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/01 5:15 p.m.17 views

CVE-2024-41744

IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

8.8CVSS5.7AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/01 5:15 p.m.7 views

CVE-2024-41745

IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS5.4AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 5:15 p.m.40 views

CVE-2024-41744

IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

8.8CVSS0.00195EPSS
SaveExploits0References1
Rows per page
Query Builder