5.4
Medium
CVE-2022-34317 IBM CICS TX 11.1 is vulnerable to cross-site scripting
Description
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CICS TX | 11.1 | No fix stated |
Other CVEs of CICS TX
The 11 CVEs of CICS TX →
CVE-2022-34320
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
5.9
Medium
CVE-2022-34318
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim
5.4
Medium
CVE-2022-34316
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by…
3.7
Low
CVE-2022-34314
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings
4.0
Medium