3.7
Low
CVE-2022-34316 IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by…
Description
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CICS TX | 11.1 | No fix stated |
Other CVEs of CICS TX
The 11 CVEs of CICS TX →
CVE-2022-34320
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
5.9
Medium
CVE-2022-34317
IBM CICS TX 11.1 is vulnerable to cross-site scripting
5.4
Medium
CVE-2022-34318
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim
5.4
Medium
CVE-2022-34314
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings
4.0
Medium