Vulnerabilities > IBM > Cics TX
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-07 | CVE-2023-33849 | Missing Encryption of Sensitive Data vulnerability in IBM Cics TX and Txseries for Multiplatforms IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. | 3.7 |
| 2023-06-07 | CVE-2023-33848 | Unspecified vulnerability in IBM Cics TX and Txseries for Multiplatforms IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode. | 6.5 |
| 2022-12-12 | CVE-2022-34318 | Improper Restriction of Rendered UI Layers or Frames vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. | 6.1 |
| 2022-11-14 | CVE-2022-34317 | Cross-site Scripting vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 is vulnerable to cross-site scripting. | 5.4 |
| 2022-11-14 | CVE-2022-34320 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | 7.5 |
| 2022-11-14 | CVE-2022-34314 | Incorrect Permission Assignment for Critical Resource vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. | 3.3 |
| 2022-11-14 | CVE-2022-34315 | Cross-site Scripting vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 is vulnerable to cross-site scripting. | 5.4 |
| 2022-11-14 | CVE-2022-34316 | Improper Encoding or Escaping of Output vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. | 5.3 |
| 2022-11-14 | CVE-2022-34312 | Insecure Storage of Sensitive Information vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. | 3.3 |
| 2022-11-14 | CVE-2022-34313 | Unspecified vulnerability in IBM Cics TX 11.1 IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. | 3.1 |