Known vulnerabilities in IBM CICS TX Standard

Vendor: IBM Corporation
Software: IBM CICS TX Standard
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_standard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 268
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Standard IBM CICS TX Standard is affected by 268 known vulnerabilities: 22 high, 173 medium, 73 low Critical High Medium Low

Vulnerabilities (268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 11.1.0.0 ifix41 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 28 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 11.1.0.0 ifix40 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 11.1.0.0 ifix39 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 11.1.0.0 ifix39 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 11.1.0.0 ifix39 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU120611 - Out-of-bounds write
CVE-2025-68973		 CWE-787 High
No
No
 11.1.0.0 ifix41 29.12.2025 SB2025122901
SB2025122902
SB2026010860
and 27 more
#VU120193 - Integer overflow
CVE-2025-13601		 CWE-190 Medium
No
No
 11.1.0.0 ifix41 18.12.2025 SB2025121853
SB2025121874
SB2025121875
and 44 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 11.1.0.0 ifix40 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU118560 - Resource exhaustion
CVE-2025-6176		 CWE-400 Medium
No
No
 11.1.0.0 ifix41 17.11.2025 SB2025111748
SB2025111750
SB2025111755
and 28 more
#VU116973 - Heap-based Buffer Overflow
CVE-2025-11083		 CWE-122 Low
No
No
 11.1.0.0 ifix41 14.10.2025 SB2025082140
SB2025101420
SB2025101421
and 40 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 11.1.0.0 ifix41 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 11.1.0.0 ifix40 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 11.1.0.0 ifix41 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114093 - Incorrect Calculation
CVE-2025-5372		 CWE-682 Low
No
No
 11.1.0.0 ifix41 14.08.2025 SB2025081494
SB2025081495
SB2025081532
and 21 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395		 CWE-476 Medium
No
No
 11.1.0.0 ifix41 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 11.1.0.0 ifix41 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988		 CWE-415 Medium
No
No
 11.1.0.0 ifix41 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 11.1.0.0 ifix41 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 11.1.0.0 ifix40 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU60114 - Integer overflow
CVE-2022-23990		 CWE-190 High
No
No
 11.1.0.0 ifix40 28.01.2022 SB2022012504
SB2022012804
SB2022020902
and 46 more


Showing elements 1 - 20 out of 268