Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*

part: a version: 10.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCics Tx (77de7fbe-52d9-570b-975a-73209cc16a7a)
Edition*
Language*
Software editionadvanced
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41746 vulnerable 2026-06-08 06:43:55.096960 IBM CICS TX cross-site scripting
HIGH (7.2)
IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-16T17:13:53.888Z
Updated: 2025-01-16T19:02:43.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43018 vulnerable 2026-06-08 06:11:09.786629 IBM CICS TX privilege escalation
MEDIUM (5.9)
IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 266163.
Published: 2023-11-02T23:48:46.991Z
Updated: 2024-09-05T14:33:34.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42031 vulnerable 2026-06-08 06:11:07.710744 IBM CICS TX denial of service
MEDIUM (4.9)
IBM TXSeries for Multiplatforms, 8.1, 8.2, and 9.1, CICS TX Standard CICS TX Advanced 10.1 and 11.1 could allow a privileged user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 266016.
Published: 2023-10-24T17:50:21.960Z
Updated: 2024-09-11T17:06:41.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42029 vulnerable 2026-06-08 06:11:07.709519 IBM CICS TX cross-site scripting
MEDIUM (4.8)
IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.
Published: 2023-11-02T23:44:23.058Z
Updated: 2024-09-05T14:34:08.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42027 vulnerable 2026-06-08 06:11:07.705222 IBM CICS TX cross-site request forgery
MEDIUM (4.3)
IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 266057.
Published: 2023-11-02T23:40:55.220Z
Updated: 2024-09-05T14:34:26.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38364 vulnerable 2026-06-08 06:08:17.663203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38363 vulnerable 2026-06-08 06:08:17.662667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38362 vulnerable 2026-06-08 06:08:17.662071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38361 vulnerable 2026-06-08 06:08:17.661676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38360 vulnerable 2026-06-08 06:08:17.661266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33850 vulnerable 2026-06-08 06:06:23.614672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33849 vulnerable 2026-06-08 06:06:23.609273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33848 vulnerable 2026-06-08 06:06:23.602977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33847 vulnerable 2026-06-08 06:06:23.602293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33846 vulnerable 2026-06-08 06:06:23.599117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.