Known vulnerabilities in IBM CICS TX Advanced - page 3

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111970 - Expected Behavior Violation
CVE-2025-4435		 CWE-440 Low
No
No
 11.1.0.0 ifix33 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 11.1.0.0 ifix33 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 11.1.0.0 ifix33 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU109844 - Untrusted Search Path
CVE-2025-4802		 CWE-426 Low
No
No
 11.1.0.0 ifix33 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU105112 - Resource exhaustion
CVE-2025-23184		 CWE-400 Medium
No
No
 10.1.0.0 ifix39, 11.1.0.0 ifix31 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU104213 - NULL Pointer Dereference
CVE-2025-27113		 CWE-476 Medium
No
No
 10.1.0.0 ifix37 26.02.2025 SB2025022619
SB2025022621
SB2025022890
and 32 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 10.1.0.0 ifix37 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 10.1.0.0 ifix37 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104044 - Resource exhaustion
CVE-2024-12243		 CWE-400 Medium
No
No
 10.1.0.0 ifix37 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 10.1.0.0 ifix37 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU103504 - Out-of-bounds write
CVE-2025-24528		 CWE-787 Medium
No
No
 10.1.0.0 ifix37 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU103502 - Use After Free
CVE-2022-49043		 CWE-416 Medium
No
No
 10.1.0.0 ifix37 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU100566 - Off-by-one Error
CVE-2024-52533		 CWE-193 High
No
No
 10.1.0.0 ifix37 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 10.1.0.0 ifix37 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 10.1.0.0 ifix37 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 10.1.0.0 ifix37 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU89430 - Heap-based Buffer Overflow
CVE-2024-34459		 CWE-122 Medium
No
No
 10.1.0.0 ifix37 14.05.2024 SB2024051432
SB2024051433
SB2024051631
and 31 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 10.1.0.0 ifix37 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 11.1.0.0 ifix29 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 10.1.0.0 ifix37 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more


Showing elements 41 - 60 out of 313