Known vulnerabilities in IBM CICS TX Advanced - page 7

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 10.1.0.0 ifix25, 11.1.0.0 ifix18 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU84496 - Improper Privilege Management
CVE-2023-43018		 CWE-269 Medium
No
No
 - 18.12.2023 SB2023121816
#VU84488 - Cross-Site Request Forgery (CSRF)
CVE-2023-42027		 CWE-352 High
No
No
 10.1.0.0 ifix22, 11.1.0.0 ifix14 18.12.2023 SB2023121807
SB2023121813
#VU84487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42029		 CWE-79 Medium
No
No
 10.1.0.0 ifix22, 11.1.0.0 ifix14 18.12.2023 SB2023121807
SB2023121815
#VU84471 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-38363		 CWE-614 Low
No
No
 10.1.0.0 ifix22 15.12.2023 SB2023121527
#VU84468 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38364		 CWE-79 Medium
No
No
 10.1.0.0 ifix22 15.12.2023 SB2023121525
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 10.1.0.0 ifix24, 11.1.0.0 ifix17 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 10.1.0.0 ifix23, 11.1.0.0 ifix16 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 10.1.0.0 ifix23, 11.1.0.0 ifix16 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 10.1.0.0 ifix24, 11.1.0.0 ifix17 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 10.1.0.0 ifix24, 11.1.0.0 ifix17 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 10.1.0.0 ifix24 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33294		 CWE-835 Low
No
No
 10.1.0.0 ifix24 31.08.2023 SB2023083102
SB2023083104
SB2023101981
and 3 more
#VU80175 - Out-of-bounds write
CVE-2020-21047		 CWE-787 Low
No
No
 10.1.0.0 ifix24 31.08.2023 SB2023083101
SB2023083104
SB2023101981
and 2 more
#VU79963 - Out-of-bounds read
CVE-2023-4156		 CWE-125 Low
No
No
 10.1.0.0 ifix24 24.08.2023 SB2023082451
SB2023082453
SB2023082810
and 9 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 11.1.0.0 ifix15 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 10.1.0.0 ifix24 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 10.1.0.0 ifix24 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 10.1.0.0 ifix24, 11.1.0.0 ifix17 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 10.1.0.0 ifix24, 11.1.0.0 ifix17 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 121 - 140 out of 313