2142 matches found
CVE-2022-34161
CVE-2022-34161 affects IBM CICS TX 11.1 (Standard/Advanced). The vulnerability is a cross-site request forgery that could let an attacker perform malicious, unauthorized actions on behalf of a trusted user. IBM’s security bulletins confirm the issue and note fixes for CICS TX Standard/Advanced 11...
CVE-2022-33955
CVE-2022-33955 affects IBM CICS TX on 11.1 (Standard/Advanced) and is caused by a back-and-refresh attack that a person with physical access can exploit to execute code. IBM reports CVSS base score 4.3 (vector CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L); NVD lists a higher score (6.8) under CVS...
CVE-2022-33955
IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. IBM X-Force ID: 229312...
PT-2022-22030 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations: For IBM CICS TX version 11.1,...
IBM CICS TX 跨站脚本漏洞
IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 contains an input validation error vulnerability that stems from improper input validation of the...
PT-2022-21934 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows an attacker with physical access to the system to execute code using a back and refresh attack. Recommendations: For IBM CICS TX version 11.1, at the moment, there is no information about...
IBM CICS TX Standard and Advanced 输入验证错误漏洞
IBM CICS TX Standard and Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. An input validation error vulnerability exists in IBM CICS TX Advanced version 11.1 that stems from improper input...
CVE-2022-34161: Cross-Site Request Forgery (CSRF)
IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 229331...
CVE-2022-34307: Missing Encryption of Sensitive Data
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...
CVE-2022-33955: Improper Neutralization of Special Elements used in an OS Command
IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. IBM X-Force ID: 229312...
CVE-2022-34163: Improper Neutralization of Input During Web Page Generation
IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 229333...
PT-2022-22118 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue is related to the lack of secure attribute setting on authorization tokens or session cookies. Attackers can exploit this by sending a http:// link to a user or planting this link in a site the...
CVE-2022-34164: Improper Input Validation
IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338...
CVE-2022-34162: Improper Restriction of Rendered UI Layers or Frames
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...
PT-2022-22031 · Ibm · Ibm Cics Tx
Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: A remote attacker could hijack the clicking action of the victim by persuading them to visit a malicious Web site, potentially launching further attacks against the victim. Recommendations: For IBM CICS T...
GSD-2022-1004945 comedi: vmk80xx: fix expression for tx buffer size
comedi: vmk80xx: fix expression for tx buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.320 by commit...
GSD-2022-1004757 comedi: vmk80xx: fix expression for tx buffer size
comedi: vmk80xx: fix expression for tx buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit...
GSD-2022-1004646 comedi: vmk80xx: fix expression for tx buffer size
comedi: vmk80xx: fix expression for tx buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...
GSD-2022-1004297 comedi: vmk80xx: fix expression for tx buffer size
comedi: vmk80xx: fix expression for tx buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
