Known vulnerabilities in IBM CICS TX Advanced - page 5

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99751 - Cross-Site Request Forgery (CSRF)
CVE-2024-41744		 CWE-352 Medium
No
No
 10.1.0.0 ifix33 05.11.2024 SB2024110532
SB2024110540
#VU99750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41745		 CWE-79 Medium
No
No
 10.1.0.0 ifix33 05.11.2024 SB2024110532
SB2024110540
#VU99593 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41746		 CWE-79 Medium
No
No
 10.1.0.0 ifix31, 11.1.0.0 ifix23 01.11.2024 SB2024110134
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 10.1.0.0 ifix32 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU95131 - Out-of-bounds read
CVE-2024-7264		 CWE-125 Medium
No
No
 10.1.0.0 ifix32 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 10.1.0.0 ifix34, 11.1.0.0 ifix26 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94533 - Improper input validation
CVE-2024-0397		 CWE-20 Low
No
No
 10.1.0.0 ifix32 18.07.2024 SB2024071850
SB2024080209
SB2024080211
and 33 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 10.1.0.0 ifix32 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 10.1.0.0 ifix32 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 10.1.0.0 ifix30, 11.1.0.0 ifix22 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 10.1.0.0 ifix30, 11.1.0.0 ifix22 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 11.1.0.0 ifix21 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87906 - Improper input validation
CVE-2024-28085		 CWE-20 Low
Available
No
 10.1.0.0 ifix29 28.03.2024 SB2024032835
SB2024032836
SB2024032901
and 22 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 10.1.0.0 ifix29 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 11.1.0.0 ifix21 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 10.1.0.0 ifix29 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85552 - Resource exhaustion
CVE-2024-22365		 CWE-400 Low
No
No
 10.1.0.0 ifix29 17.01.2024 SB2024011799
SB20240117126
SB2024011839
and 44 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 10.1.0.0 ifix32, 11.1.0.0 ifix24 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 10.1.0.0 ifix29 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 10.1.0.0 ifix29 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more


Showing elements 81 - 100 out of 313