CVE-2023-33850

CVE-2023-33850 involves IBM GSKit-Crypto and a timing-based side channel in the RSA Decryption routine that could allow a remote attacker to obtain sensitive information. The connected IBM bulletins enumerate this CVE among others and indicate affected IBM products (e.g., a range of IBM Java/SDK/...

CVE-2024-22345

CVE-2024-22345 affects IBM TXSeries for Multiplatforms 8.2. The vulnerability arises from transmitting or storing authentication credentials using an insecure method, allowing potential unauthorized interception or retrieval. Multiple sources (Red Hat, IBM Security Bulletin, PTSecurity, CVE listi...

CVE-2024-22343

CVE-2024-22343 affects IBM TXSeries for Multiplatforms 8.2. The issue in the Administration Console allows web pages to be stored locally and read by another user on the same system. IBM X-Force ID: 280190; CVSS base score in IBM bulletin listed as 4.0. Affected product/version: IBM TXSeries for ...

CVE-2023-33847

IBM TXSeries for Multiplatforms (versions 8.1–9.1) and IBM CICS TX Standard/Advanced (TX Standard 11.1; TX Advanced 10.1–11.1) expose a vulnerability where authorization tokens and session cookies are issued without the Secure attribute. This allows an attacker to obtain cookie values by luring a...

CVE-2024-22344

IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection in the Administration Console. The issue allows a remote attacker to inject HTML that executes in the victim’s browser within the hosting site’s security context. Connected sources corroborate the vulnerability as CVE-2024-22344 ...

CVE-2023-33846

CVE-2023-33846 affects IBM TXSeries for Multiplatforms (8.1, 8.2, 9.1) and IBM CICS TX Standard/Advanced (11.1, 10.1) with a cross-site scripting flaw in the Web UI that can let an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Remediation...

CVE-2023-38741

IBM TXSeries for Multiplatforms versions 8.1, 8.2, and 9.1 are vulnerable to a denial-of-service due to improper enforcement of timeouts on individual read operations, enabling slowloris-type attacks. The base CVSS score is 7.5 ( NETWORK, LOW complexity, NONE privileges, HIGH impact on availabili...