Known vulnerabilities in IBM CICS TX Advanced - page 16

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69437 - Configuration
CVE-2022-34318
CWE-16 Low
No
No
11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69436 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-34313
CWE-614 Low
No
No
11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69434 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34319
CWE-327 Medium
No
No
11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69433 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34312
CWE-200 Low
No
No
11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69432 - Incorrect Default Permissions
CVE-2022-34314
CWE-276 Low
No
No
11.1.0.0 ifix5 21.11.2022 SB2022112101
#VU65909 - Cross-Site Request Forgery (CSRF)
CVE-2022-34161
CWE-352 Medium
No
No
- 01.08.2022 SB2022080112
SB2023022408
#VU65908 - Improper input validation
CVE-2022-34164
CWE-20 Low
No
No
- 01.08.2022 SB2022080111
SB2023022412
#VU65906 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22393
CWE-200 Low
No
No
- 01.08.2022 SB2022080110
SB2022081039
SB2022081515
and 8 more
#VU64013 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-46708
CWE-1021 Medium
No
No
- 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 9 more
#VU64011 - Improper input validation
CVE-2018-25031
CWE-20 Low
Available
No
- 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU60870 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-39038
CWE-451 Low
No
No
- 25.02.2022 SB2022022505
SB2022060710
SB2022062008
and 12 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450
CWE-94 High
No
No
- 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
10.1.0.0 ifix11, 11.1.0.0 ifix4 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 301 - 320 out of 313