Known vulnerabilities in IBM CICS TX Standard - page 7

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cics_tx_standard:*:*:*:*:*:*:*:*
Total vulnerabilities: 268
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM CICS TX Standard IBM CICS TX Standard is affected by 268 known vulnerabilities: 22 high, 173 medium, 73 low Critical High Medium Low

Vulnerabilities (268)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81285 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34320
CWE-327 Medium
No
No
11.1.0.0 ifix5 29.09.2023 SB2023092925
SB2023092927
#VU81283 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-34329
CWE-644 Medium
No
No
11.1.0.0 ifix5 29.09.2023 SB2023092923
SB2023092926
#VU81282 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-34316
CWE-644 Low
No
No
11.1.0.0 ifix5 29.09.2023 SB2023092922
SB2023100314
#VU81262 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34310
CWE-327 Medium
No
No
11.1.0.0 ifix5 29.09.2023 SB2023092905
SB2023092907
#VU81260 - Insufficiently Protected Credentials
CVE-2022-34311
CWE-522 Low
No
No
11.1.0.0 ifix5 29.09.2023 SB2023092903
SB2023092904
#VU81250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34315
CWE-79 Medium
No
No
11.1.0.0 ifix5 28.09.2023 SB2023092820
SB2023092909
#VU81247 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-39028
CWE-74 Low
No
No
11.1.0.0 ifix2 28.09.2023 SB2023092808
SB2023092816
#VU81243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34166
CWE-79 Medium
No
No
11.1.0.0 ifix2 28.09.2023 SB2023092802
SB2023092807
#VU81239 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-33955
CWE-78 Medium
No
No
11.1 127636 27.09.2023 SB2023092728
SB2023092803
#VU81235 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-34162
CWE-1021 Medium
No
No
11.1.0.0 127733 27.09.2023 SB2023092726
SB2023092727
#VU81233 - Allocation of Resources Without Limits or Throttling
CVE-2022-34308
CWE-770 Low
No
No
- 27.09.2023 SB2023092725
SB2023092806
#VU78253 - Origin Validation Error
CVE-2019-11777
CWE-346 Medium
No
No
11.1.0.0 ifix3 14.07.2023 SB2023071415
SB2023092720
SB2023092722
and 4 more
#VU77531 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29405
CWE-94 Medium
No
No
11.1.0.0 ifix13 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77530 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29404
CWE-94 Medium
No
No
11.1.0.0 ifix13 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 44 more
#VU77529 - Permissions, Privileges, and Access Controls
CVE-2023-29403
CWE-264 Medium
No
No
11.1.0.0 ifix13 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 46 more
#VU77528 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29402
CWE-94 Medium
No
No
11.1.0.0 ifix13 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
11.1.0.0 ifix13 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
11.1.0.0 ifix13 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
11.1.0.0 ifix13 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU60870 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-39038
CWE-451 Low
No
No
11.1.0.0 ifix2 25.02.2022 SB2022022505
SB2022060710
SB2022062008
and 12 more


Showing elements 121 - 140 out of 268