Known vulnerabilities in IBM CICS TX Advanced - page 8

Vendor: IBM Corporation
Software: IBM CICS TX Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 313
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Advanced IBM CICS TX Advanced is affected by 313 known vulnerabilities: 29 high, 196 medium, 88 low Critical High Medium Low

Vulnerabilities (313)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-33960		 CWE-89 High
No
No
 11.1.0.0 ifix2 23.11.2023 SB20231123111
#VU83217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38360		 CWE-79 Medium
No
No
 10.1.0.0 ifix22 16.11.2023 SB2023111609
#VU83215 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-38361		 CWE-327 Medium
No
No
 10.1.0.0 ifix22 16.11.2023 SB2023111607
#VU83197 - Observable discrepancy
CVE-2023-38362		 CWE-203 Medium
No
No
 10.1.0.0 ifix22 15.11.2023 SB2023111535
#VU83010 - Resource exhaustion
CVE-2023-42031		 CWE-400 Low
No
No
 - 13.11.2023 SB2023111312
SB2023111313
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 10.1.0.0 ifix20, 11.1.0.0 ifix12 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 11.1.0.0 ifix15 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 11.1.0.0 ifix15 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34167		 CWE-79 Medium
No
No
 11.1.0.0 ifix2 03.10.2023 SB2023100317
SB2023100318
#VU81411 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34317		 CWE-79 Medium
No
No
 11.1.0.0 ifix5 03.10.2023 SB2023100309
SB2023100311
#VU81317 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-31767		 CWE-78 High
No
No
 11.1.0.0 ifix2 02.10.2023 SB2023100230
SB2023100302
#VU81313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34163		 CWE-79 Medium
No
No
 11.1.0.0 ifix3 02.10.2023 SB2023100228
SB2023100229
#VU81290 - Security Features
CVE-2022-38705		 CWE-254 Medium
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092934
SB2023092935
#VU81285 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34320		 CWE-327 Medium
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092925
SB2023092927
#VU81283 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-34329		 CWE-644 Medium
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092923
SB2023092926
#VU81282 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-34316		 CWE-644 Low
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092922
SB2023100314
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 11.1.0.0 ifix15 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 11.1.0.0 ifix15 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU79665 - Improper input validation
CVE-2023-38737		 CWE-20 Medium
No
No
 10.1.0.0 ifix22, 11.1.0.0 ifix14 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU65078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34160		 CWE-79 Medium
No
No
 11.1.0.0 ifix2 11.07.2022 SB2022071107
SB20231123111


Showing elements 141 - 160 out of 313