Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Standard.

Summary Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Standard. IBM WebSphere Liberty has been updated within IBM CICS TX Standard to address these vulnerabilities. Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before...

EUVD-2022-37175

Malicious code in bioql PyPI...

CVE-2022-34318

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

CVE-2022-34317

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

CVE-2022-34320

CVE-2022-34320 affects IBM CICS TX 11.1. The vulnerability arises from the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM references the X-Force ID 229464 and documents a remediation path: IBM CICS TX Standard/Advan...

CVE-2022-34315

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

Cross site scripting

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

CVE-2022-34318

CVE-2022-34318 concerns IBM CICS TX 11.1 (Standard/Advanced). A remote attacker could hijack a victim’s clicking action by steering them to a malicious Web site, potentially enabling further attacks. The vulnerability is documented across multiple sources (IBM X-Force ID 229461). Remediations men...

CVE-2022-34316

CVE-2022-34316 affects IBM CICS TX 11.1, where HTTP headers may not neutralize or may incorrectly neutralize web scripting syntax, potentially enabling abuse by components that process raw headers. Public details in IBM bulletins confirm the issue and cite IBM X-Force ID 229452. CVSS metrics plac...

CVE-2022-34314

The CVE-2022-34314 entry concerns IBM CICS TX 11.1, where insecure permission settings could disclose sensitive information to a local user. This is evidenced by multiple connected sources (IBM Security Bulletins for Standard and Advanced editions) indicating an information-disclosure vulnerabili...

CVE-2022-34314

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...

CVE-2022-34315

IBM CICS TX 11.1 is affected by CVE-2022-34315, a cross-site scripting vulnerability that could allow embedding arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected products include IBM CICS TX Standard and Advanced (11.1). Remediation notes f...

CVE-2022-34313

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...

Security feature bypass

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...

Code injection

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

CVE-2022-38705

IBM CICS TX 11.1 Standard and Advanced are affected by CVE-2022-38705 due to a reverse tabnabbing flaw that could let a remote attacker bypass security restrictions and redirect users to phishing sites. Affected products include IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1). The IBM s...

CVE-2022-34308

IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437...

Input validation

IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437...

CVE-2022-34164

IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338...

CVE-2022-34162

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...