Known vulnerabilities in IBM CICS TX Standard - page 6

Vendor: IBM Corporation
Software: IBM CICS TX Standard
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_standard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 268
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Standard IBM CICS TX Standard is affected by 268 known vulnerabilities: 22 high, 173 medium, 73 low Critical High Medium Low

Vulnerabilities (268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84496 - Improper Privilege Management
CVE-2023-43018		 CWE-269 Medium
No
No
 - 18.12.2023 SB2023121816
#VU84488 - Cross-Site Request Forgery (CSRF)
CVE-2023-42027		 CWE-352 High
No
No
 11.1.0.0 ifix14 18.12.2023 SB2023121807
SB2023121813
#VU84487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42029		 CWE-79 Medium
No
No
 11.1.0.0 ifix14 18.12.2023 SB2023121807
SB2023121815
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 11.1.0.0 ifix16 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU83010 - Resource exhaustion
CVE-2023-42031		 CWE-400 Low
No
No
 - 13.11.2023 SB2023111312
SB2023111313
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 11.1.0.0 ifix12 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 11.1.0.0 ifix16 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 11.1.0.0 ifix15 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 11.1.0.0 ifix15 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34167		 CWE-79 Medium
No
No
 11.1.0.0 ifix2 03.10.2023 SB2023100317
SB2023100318
#VU81411 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34317		 CWE-79 Medium
No
No
 11.1.0.0 ifix5 03.10.2023 SB2023100309
SB2023100311
#VU81317 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-31767		 CWE-78 High
No
No
 11.1.0.0 ifix2 02.10.2023 SB2023100230
SB2023100302
#VU81313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34163		 CWE-79 Medium
No
No
 11.1.0.0 ifix3 02.10.2023 SB2023100228
SB2023100229
#VU81290 - Security Features
CVE-2022-38705		 CWE-254 Medium
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092934
SB2023092935
#VU81272 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34309		 CWE-327 Medium
No
No
 11.1.0.0 ifix5 29.09.2023 SB2023092915
SB2023100315
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 11.1.0.0 ifix15 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 11.1.0.0 ifix15 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU79665 - Improper input validation
CVE-2023-38737		 CWE-20 Medium
No
No
 11.1.0.0 ifix14 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 11.1.0.0 ifix15 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 11.1.0.0 ifix17 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 101 - 120 out of 268