Security Bulletin: multiple vulnerabilities in Java SE may affect CICS TX Standard

Summary CICS TX Standard has addressed multiple vulnerabilities in Java SE CVE-2022-21628, CVE-2022-21626, CVE-2022-21624 and CVE-2022-21619. Vulnerability Details CVEID:CVE-2022-21628 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by a flaw in the Lightweight HTTP Server. By...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 affects CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary There is a vulnerability which is related to identity spoofing in IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. CICS Transaction Gateway has addressed th...

Security Bulletin: CVE-2022-3676 may affect IBM CICS TX Advanced

Summary Eclipse Openj9 with IBM Java could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. By sending a specially-crafted request using bytecode, an attacker could exploit this vulnerability to access or modify memory. This...

Security Bulletin: CVE-2022-37734 may affect IBM CICS TX Standard

Summary WebSphere Application Server Liberty is vulnerable to denial of service due to GraphQL Java. This affects IBM WebSphere Liberty used by IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-37734 DESCRIPTION: GraphQL Java is...

Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Standard

Summary CVE-2018-1099, CVE-2018-1098 related to etcd package may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2018-1099 DESCRIPTION: etcd could allow a remote attacker to gain access to the DNS records, caused by a DNS...

Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Advanced

Summary CVE-2018-1099, CVE-2018-1098 related to etcd package may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2018-1099 DESCRIPTION: etcd could allow a remote attacker to gain access to the DNS records, caused by a DNS...

Security Bulletin: CVE-2022-37734 may affect IBM CICS TX Advanced

Summary WebSphere Application Server Liberty is vulnerable to denial of service due to GraphQL Java. This affects IBM WebSphere Liberty used by IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-37734 DESCRIPTION: GraphQL Java is...

Security Bulletin: CVE-2022-3676 may affect IBM CICS TX Standard

Summary Eclipse Openj9 with IBM Java could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. By sending a specially-crafted request using bytecode, an attacker could exploit this vulnerability to access or modify memory. This...

Security Bulletin: CVE-2022-32149 may affect IBM CICS TX Standard

Summary CVE-2022-32149 related to golang package may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-32149 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation by the...

Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard

Summary Following vulnerabilities in Go may affect IBM CICS TX Standard - CVE-2021-29923, CVE-2022-1705, CVE-2022-1962, CVE-2022-24675, CVE-2022-27664, CVE-2022-28131, CVE-2022-28327, CVE-2022-30580, CVE-2022-30629, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635,...

Security Bulletin: CVE-2022-32149 may affect IBM CICS TX Advanced

Summary CVE-2022-32149 related to golang package may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-32149 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation by the...

Security Bulletin: CVE-2022-3509, CVE-2022-3171 may affect IBM CICS TX Standard

Summary WebSphere Application Server Liberty is vulnerable to denial of service due to Google protobuf-java . This affects IBM WebSphere Liberty used by IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-3509 DESCRIPTION: protobuf-ja...

Security Bulletin: CVE-2022-3509, CVE-2022-3171 may affect IBM CICS TX Advanced

Summary WebSphere Application Server Liberty is vulnerable to denial of service due to Google protobuf-java . This affects IBM WebSphere Liberty used by IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-3509 DESCRIPTION: protobuf-ja...

Security Bulletin: IBM CICS TX Standard is vulnerable to a cross-site scripting attack (CVE-2022-34315).

Summary IBM CICS TX Standard could allow a cross-site scripting vulnerability to be exploited. The fix removes this vulnerability CVE-2022-34315 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34315 DESCRIPTION: IBM CICS TX is vulnerable to cross-site scripting. This vulnerability...

Security Bulletin: IBM CICS TX Standard is vulnerable to a denial of service, caused by improper logic in the Yaml Go package decode.go function.

Summary IBM CICS TX Standard is vulnerable to a denial of service, caused by improper logic in the Yaml Go package decode.go function. The fix removes this vulnerability from IBM CICS TX Standard. Vulnerability Details IBM X-Force ID: 221571 DESCRIPTION: Yaml Go package is vulnerable to a denial ...

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing web pages to be stored locally which can then be accessed by other users on the system (CVE-2022-34312).

Summary IBM CICS TX Standard could allow web pages to be sored locally which can then be accessed by other users on the system. The fix removes this vulnerability CVE-2022-34312 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34312 DESCRIPTION: IBM CICS TX allows web pages to be...

Security Bulletin: IBM CICS TX Standard is vulnerable to a back and refresh attack (CVE-2022-33955)

Summary IBM CICS TX could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. The fix removes this vulnerability CVE-2022-33955 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-33955 DESCRIPTION: IBM CICS TX could allow...

Security Bulletin: IBM CICS TX Standard is vulnerable to an attacker being allowed to decrypt highly sensitive information (CVE-2022-34319).

Summary IBM CICS TX Standard could allow an attacker to decrypt highly sensitive information. The fix removes this vulnerability CVE-2022-34319 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34319 DESCRIPTION: IBM CICS TX uses weaker than expected cryptographic algorithms that...

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing sensitive information to be disclosed due to insecure permission settings (CVE-2022-34314).

Summary IBM CICS TX Standard could allow sensitive information to be disclosed due to insecure permission settings. The fix removes this vulnerability CVE-2022-34314 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34314 DESCRIPTION: IBM CICS TX could disclose sensitive information...

Security Bulletin: An HTTP header injection vulnerability in IBM WebSphere Application Server Liberty (CCVE-2022-34165) affects IBM CICS TX Standard

Summary An HTTP header injection vulnerability exists in IBM WebSphere Application Server Liberty used by IBM CICS TX Standard. IBM CICS TX Standard has addressed the vulnerability CCVE-2022-34165. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0,...