Known vulnerabilities in IBM CICS TX Advanced

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 10.1.0.0 ifix50 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 10.1.0.0 ifix48 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 28 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 10.1.0.0 ifix46 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 10.1.0.0 ifix47 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 10.1.0.0 ifix46 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 10.1.0.0 ifix46 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 10.1.0.0 ifix46 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 10.1.0.0 ifix46 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 10.1.0.0 ifix47 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 10.1.0.0 ifix45, 11.1.0.0 ifix37 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 10.1.0.0 ifix45, 11.1.0.0 ifix37 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 10.1.0.0 ifix43, 11.1.0.0 ifix35 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 10.1.0.0 ifix44, 11.1.0.0 ifix36 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114006 - Privilege Chaining
CVE-2025-36124		 CWE-268 High
No
No
 10.1.0.0 ifix43, 11.1.0.0 ifix35 13.08.2025 SB2025081354
SB2025082918
SB2025082921
and 23 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 10.1.0.0 ifix44, 11.1.0.0 ifix36 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more


Showing elements 1 - 20 out of 313