Known vulnerabilities in IBM CICS TX Advanced - page 11

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77146 - Active Debug Code
CVE-2023-33848		 CWE-489 Low
No
No
 10.1.0.0 ifix17, 11.1.0.0 ifix10 12.06.2023 SB2023061204
SB2023061205
SB2023061219
#VU77138 - Cleartext Transmission of Sensitive Information
CVE-2023-33849		 CWE-319 Low
No
No
 10.1.0.0 ifix17, 11.1.0.0 ifix10 09.06.2023 SB2023060934
SB2023061206
SB2023061207
#VU77137 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33846		 CWE-79 Medium
No
No
 10.1.0.0 ifix17, 11.1.0.0 ifix10 09.06.2023 SB2023060933
SB2023061213
SB2023061217
#VU77134 - Security Features
CVE-2023-33847		 CWE-254 Low
No
No
 10.1.0.0 ifix17, 11.1.0.0 ifix10 09.06.2023 SB2023060932
SB2023061214
SB2023061222
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 10.1.0.0 ifix19, 11.1.0.0 ifix11 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75512 - Improper Authorization
CVE-2021-28235		 CWE-285 High
No
No
 11.1.0.0 ifix6 26.04.2023 SB2023042619
SB2023052901
SB2023052902
and 10 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 10.1.0.0 ifix19, 11.1.0.0 ifix11 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 10.1.0.0 ifix19, 11.1.0.0 ifix11 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 10.1.0.0 ifix19, 11.1.0.0 ifix11 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 10.1.0.0 ifix18 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 10.1.0.0 ifix18 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 11.1.0.0 ifix9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 11.1.0.0 ifix9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 10.1.0.0 ifix18 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 11.1.0.0 ifix8 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 10.1.0.0 ifix18 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 10.1.0.0 ifix16, 11.1.0.0 ifix9 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 10.1.0.0 ifix18 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 10.1.0.0 ifix18 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 10.1.0.0 ifix19, 11.1.0.0 ifix11 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more


Showing elements 201 - 220 out of 313