CVE-2023-33848

The CVE-2023-33848 issue affects IBM TXSeries for Multiplatforms (versions 8.1–9.1) and IBM CICS TX products, where enabling debug mode can let a privileged user obtain highly sensitive information. Affected components include IBM TXSeries for Multiplatforms and CICS TX Standard/Advanced (Standar...

IBM CICS TX 安全漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A security vulnerability exists in CICS TX Standard version 11.1, CICS TX Advanced versions 10.1 and 11.1, and IBM TXSeries for Multiplatforms versions 8.1, 8.2, and 9.1, which stems from...

Security Bulletin: "Administration Console can process body parameters that were submitted in the query" may affect IBM TXSeries for Multiplatforms

Summary "Administration Console can process body parameters that were submitted in the query" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Detail...

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM TXSeries for Multiplatforms

Summary "Administration Console can be switched to debug mode" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Details CVEID:CVE-2023-33848...

Security Bulletin: "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM TXSeries for Multiplatforms

Summary "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Details CVEID:CVE-2023-3384...

Security Bulletin: "Reflected Cross Site Scripting" may affect IBM TXSeries for Multiplatforms

Summary "Reflected Cross Site Scripting" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Details CVEID:CVE-2023-33846 DESCRIPTION: IBM CICS TX is...

PT-2023-3206 · Ibm · Cics Tx Advanced +2

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms versions 8.1 through 9.1 CICS TX Standard versions 10.1 through 11.1 CICS TX Advanced versions 10.1 through 11.1 Description: The issue is related to the application's excessive data output, which could allow a...

Security Bulletin: CVE-2023-0482 may affect IBM TXSeries for Multiplatforms

Summary CVE-2023-0482 may affect IBM WebSphere Application Server Liberty used by IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVEs. Updated Liberty is provided as a special fix and the fix is uploaded to Fix Central. Vulnerability Details...

Security Bulletin: CVE-2023-24998 may affect IBM TXSeries for Multiplatforms

Summary CVE-2023-24998 may affect IBM WebSphere Application Server Liberty used by IBM TXSeries for Multiplatforms . TXSeries for Multiplatforms has addressed the applicable CVEs. Updated Liberty is provided as special fix and fix is uploaded to Fix Central. Vulnerability Details...

Security Bulletin: CVE-2022-21541, CVE-2022-21540 may affect TXSeries for Multiplatforms on HP platform.

Summary Multiple CVEs - CVE-2022-21541, CVE-2022-21540 may affect IBM Java used by TXSeries for Multiplatforms on HP platform. TXSeries for Multiplatforms has addressed the applicable CVEs. Updated Java is provided as special fix and fix is uploaded to Fix Central. Vulnerability Details...

Security Bulletin: CWE – 307: Inadequate Account Lockout may affect IBM TXSeries for Multiplatforms.

Summary CWE - 307 may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CWE. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Product| Versions ---|--- IBM...

Security Bulletin: vulnerability in Apache James MIME4J (CVE-2022-45787) may affect TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed a vulnerability in Apache James MIME4J CVE-2022-45787. Vulnerability Details CVEID:CVE-2022-45787 DESCRIPTION: Apache James MIME4J could allow a local authenticated attacker to obtain sensitive information, caused by improper laxist permissions on...

Security Bulletin: multiple vulnerabilities in Java SE may affect TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed multiple vulnerabilities in Java SE CVE-2022-21628, CVE-2022-21626, CVE-2022-21624 and CVE-2022-21619. Vulnerability Details CVEID:CVE-2022-21628 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by a flaw in the Lightweight HTTP...

Security Bulletin: server-side request forgery vulnerability in Apache CXF (CVE-2022-46364) may affect TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed a vulnerability in Apache CXF CVE-2022-46364. Vulnerability Details CVEID:CVE-2022-46364 DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a flaw in parsing the href attribute of XOP:Include in MTOM requests. By using...

Security Bulletin: CVE-2022-3509 and CVE-2022-3171 may affect IBM TXSeries for Multiplatforms

Summary WebSphere Application Server Liberty is vulnerable to denial of service due to Google protobuf-java . This affects IBM WebSphere Liberty used by IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-3509...

Security Bulletin: CVE-2022-3676 may affect IBM TXSeries for Multiplatforms

Summary Eclipse Openj9 with IBM Java could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. By sending a specially-crafted request using bytecode, an attacker could exploit this vulnerability to access or modify memory. This...

Security Bulletin: Liberty is vulnerable to denial of service due to GraphQL Java affecting IBM TXSeries for Multiplatforms

Summary Liberty is vulnerable to a denial of service due to GraphQL Java mpGraphQL-1.0 or mpGraphQL-2.0 caused by an uncontrolled resource consumption flaw. This affects WebSphere Application Server Liberty versions 17.0.0.3 - 22.0.0.11 used by IBM TXSeries for Multiplatforms. IBM TXSeries for...

Security Bulletin: An HTTP header injection vulnerability in IBM WebSphere Application Server Liberty (CCVE-2022-34165) affects IBM TXSeries for Multiplatforms

Summary An HTTP header injection vulnerability exists in IBM WebSphere Application Server Liberty used by IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the vulnerability CCVE-2022-34165. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere...

Security Bulletin: A vulnerability (CVE-2022-24839) in WebSphere Application Server Liberty affects IBM TXSeries for Multiplatforms

Summary WebSphere Application Server Liberty is used by IBM TXSeries for Multiplatforms to provide a web based administration console and to provide web services support. The fix removes vulnerability CVE-2022-24839, in the Neko HTML library used by IBM WebSphere Application Server Liberty, that...

Security Bulletin: IBM TXSeries for Multiplatforms is vulnerable to no confidentiality impact, high integrity impact, and no availability impact (CVE-2021-2163)

Summary IBM TXSeries for Multiplatforms could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact. The fix removes this vulnerability CVE-2021-2163 from IBM TXSeries for Multiplatforms. Vulnerability Details CVEID:CVE-2021-2163...