Known vulnerabilities in CICS Transaction Gateway

Vendor: IBM Corporation
Software: CICS Transaction Gateway
Software CPE: cpe:2.3:a:ibm_corporation:cics_transaction_gateway:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 70
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CICS Transaction Gateway CICS Transaction Gateway is affected by 70 known vulnerabilities: 3 high, 45 medium, 22 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88136 - Resource exhaustion
CVE-2024-27268		 CWE-400 Medium
No
No
 - 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270		 CWE-79 Medium
No
No
 - 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 - 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU85038 - Permissions, Privileges, and Access Controls
CVE-2023-47140		 CWE-264 Low
No
No
 - 05.01.2024 SB2024010537
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 - 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 - 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 - 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU59695 - Integer overflow
CVE-2022-0185		 CWE-190 Low
Available
Exploited
 - 18.01.2022 SB2022011820
SB2022011932
SB2022011937
and 33 more
#VU10890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1444		 CWE-79 Low
No
No
 - 09.03.2018 SB2018030906
SB20240827138


Showing elements 1 - 20 out of 70