Known vulnerabilities in IBM CICS TX Standard - page 13

Vendor: IBM Corporation
Software: IBM CICS TX Standard
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_standard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 268
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Standard IBM CICS TX Standard is affected by 268 known vulnerabilities: 22 high, 173 medium, 73 low Critical High Medium Low

Vulnerabilities (268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69447 - Reachable Assertion
CVE-2020-9283		 CWE-617 Medium
Available
No
 11.1.0.0 ifix5 21.11.2022 SB2020022039
SB2022112104
SB2023090418
and 6 more
#VU69437 - Configuration
CVE-2022-34318		 CWE-16 Low
No
No
 11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69436 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-34313		 CWE-614 Low
No
No
 11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69434 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34319		 CWE-327 Medium
No
No
 11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69433 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34312		 CWE-200 Low
No
No
 11.1.0.0 ifix5 21.11.2022 SB2022112102
#VU69432 - Incorrect Default Permissions
CVE-2022-34314		 CWE-276 Low
No
No
 11.1.0.0 ifix5 21.11.2022 SB2022112101
#VU67029 - Error Handling
CVE-2021-41041		 CWE-388 Low
No
No
 11.1.0.0 ifix4 06.09.2022 SB2022090642
SB2022090643
SB2022093005
and 25 more
#VU65904 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-34307		 CWE-614 Low
No
No
 - 01.08.2022 SB2022080108
SB2023022411
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 11.1.0.0 ifix5 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU65078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34160		 CWE-79 Medium
No
No
 - 11.07.2022 SB2022071107
SB20231123111
#VU64966 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34306		 CWE-444 Low
No
No
 - 07.07.2022 SB2022070711
SB2023021539
#VU64197 - Improper Authentication
CVE-2022-22475		 CWE-287 Low
No
No
 - 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU59718 - Improper input validation
CVE-2022-21349		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022060312
and 39 more
#VU59722 - Improper input validation
CVE-2022-21360		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU59732 - Improper input validation
CVE-2022-21340		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59733 - Improper input validation
CVE-2022-21341		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 11.1.0.0 ifix4 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU41647 - Improper preservation of permissions
CVE-2020-15113		 CWE-281 Low
No
No
 11.1.0.0 ifix5 10.08.2020 SB2020081020
SB2022092231
SB2022112104
and 5 more


Showing elements 241 - 260 out of 268