CVE-2023-38364

CVE-2023-38364 affects IBM CICS TX Advanced 10.1. The vulnerability is a cross-site scripting (XSS) flaw arising from insufficient input handling in the Web UI, enabling an attacker to embed arbitrary JavaScript within a trusted session. The CVSS v3.1 base score is 6.1 (Network attack, user inter...

Security Bulletin: "Incorrect/Missing Security Headers" may affect IBM CICS TX Advanced 10.1

Summary "Incorrect/Missing Security Headers" may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2023-38364 DESCRIPTION: IBM CICS TX Advanced is vulnerable to cross-site scripting. This vulnerability allows users t...