857 matches found
CVE-2023-38363
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the...
CVE-2023-38363
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the...
Authorization
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the...
Cross site scripting
IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260821...
CVE-2023-38364 IBM CICS TX Advanced cross-site scripting
IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260821...
CVE-2023-38364 IBM CICS TX Advanced cross-site scripting
IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260821...
CVE-2023-38364
CVE-2023-38364 affects IBM CICS TX Advanced 10.1. The vulnerability is a cross-site scripting (XSS) flaw arising from insufficient input handling in the Web UI, enabling an attacker to embed arbitrary JavaScript within a trusted session. The CVSS v3.1 base score is 6.1 (Network attack, user inter...
CVE-2023-38363
CVE-2023-38363 affects IBM CICS TX Advanced 10.1. The issue is that authorization tokens and session cookies are not marked with the Secure attribute, allowing an attacker to obtain cookie values by enticing a user to click an http:// link or by embedding the link on a site the user visits. The i...
CVE-2023-38363 IBM CICS TX information disclosure
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the...
CVE-2023-38363 IBM CICS TX information disclosure
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the...
PT-2023-26386 · Ibm · Ibm Cics Tx Advanced
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced version 10.1 Description: The issue arises because IBM CICS TX Advanced does not set the secure attribute on authorization tokens or session cookies. This allows attackers to potentially obtain cookie values by sending a...
IBM CICS TX 安全漏洞
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can...
PT-2023-26387 · Ibm · Ibm Cics Tx Advanced
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced version 10.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
Security Bulletin: "Incorrect/Missing Security Headers" affects IBM CICS TX Advanced 10.1.
Summary "Cookie with Insecure, Improper or Missing SameSite attribute" vulnerability affects IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38363 DESCRIPTION: IBM CICS TX Advanced does not set the secure attribute o...
Security Bulletin: CVE-2023-38737 affects IBM WebSphere Liberty shipped with IBM CICS TX Standard
Summary CVE-2023-38737 affects IBM WebSphere Liberty shipped with IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38737 DESCRIPTION: IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a...
Security Bulletin: CVE-2023-38737 affects IBM WebSphere Liberty shipped with IBM CICS TX Advanced
Summary CVE-2023-38737 affects IBM WebSphere Liberty shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID: CVE-2023-38737 DESCRIPTION: IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a...
Security Bulletin: "Unsafe third-party link (target="_blank") vulnerability may affect IBM CICS TX Advanced 10.1
Summary Unsafe third-party link target="blank" vulnerability may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38360 DESCRIPTION: IBM CICS TX Advanced is vulnerable to cross-site scripting. This vulnerabilit...
Security Bulletin: "Weak or Unsupported ciphers" vulnerability may affect IBM CICS TX Advanced 10.1
Summary "Weak or Unsupported ciphers" vulnerability may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38361 DESCRIPTION: IBM CICS TX Advanced uses weaker than expected cryptographic algorithms that could all...
Security Bulletin: "Hidden Directory Detected" vulnerability may affect IBM CICS TX Advanced 10.1
Summary "Hidden Directory Detected" vulnerability may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38362 DESCRIPTION: IBM CICS TX Advanced could disclose sensitive information to a remote attacker due to...
Security Bulletin: "Incorrect/Missing Security Headers" may affect IBM CICS TX Advanced 10.1
Summary "Incorrect/Missing Security Headers" may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38364 DESCRIPTION: IBM CICS TX Advanced is vulnerable to cross-site scripting. This vulnerability allows users t...