5.4
Medium
CVE-2024-56475 IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting
Description
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TXSeries for Multiplatforms | 11.1 | No fix stated |
| TXSeries for Multiplatforms | 9.1 | No fix stated |
Other CVEs of TXSeries for Multiplatforms
The 20 CVEs of TXSeries for Multiplatforms →
CVE-2024-56476
IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login…
5.3
Medium
CVE-2024-56474
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker…
4.3
Medium
CVE-2025-0154
IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper…
5.3
Medium
CVE-2024-41742
IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout…
7.5
High