Security Bulletin: CICS Transaction Gateway for Multiplatforms

Summary Multiple security vulnerabilities exist in the JREs shipped with CICS Transaction Gateway CICS TG for client applications. CICS TG itself is not vulnerable to all these risks but client side applications using the CICS TG supplied JREs might be. Vulnerability Details CVEID: CVE-2016-3443...

Security Bulletin: Vulnerabilities in IBM Java Runtime affects CICS Transaction Gateway (CVE-2016-0363 and CVE-2016-0636).

Summary There are vulnerabilities in IBM® SDK Java™ Runtime Environments JREs, Versions 6, 7, 7R1 & 8 shipped with CICS Transaction Gateway to enable customers to run CICS TG Java client applications. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability...

cics-info NSE Script

Using the CICS transaction CEMT, this script attempts to gather information about the current CICS transaction server region. It gathers OS information, Datasets files, transactions and user ids. Based on CICSpwn script by Ayoub ELAASSAL. Script Arguments cics-info.trans Instead of gathering all...

CVE-2014-3042

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service storage overlay by using a 3270 emulator to send an invalid 3270 data stream...

CVE-2014-3042: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service storage overlay by using a 3270 emulator to send an invalid 3270 data stream...