Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cics_tx:11.1.0.0:-:*:*:standard:*:*:*

part: a version: 11.1.0.0 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCics Tx (77de7fbe-52d9-570b-975a-73209cc16a7a)
Edition*
Language*
Software editionstandard
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1331 vulnerable 2026-06-03 14:59:05.088528 IBM CICS TX code execution
HIGH (7.8)
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.
Published: 2025-05-08T21:55:41.116Z
Updated: 2026-02-26T18:28:41.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1330 vulnerable 2026-06-03 14:59:05.086474 IBM CICS TX code execution
HIGH (7.8)
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1  could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.
Published: 2025-05-08T21:54:42.271Z
Updated: 2026-02-26T18:28:42.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1329 vulnerable 2026-06-03 14:59:05.069655 IBM CICS TX code execution
HIGH (7.8)
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function.
Published: 2025-05-08T21:53:48.475Z
Updated: 2026-02-26T18:28:42.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41746 vulnerable 2026-06-03 14:56:34.921996 IBM CICS TX cross-site scripting
HIGH (7.2)
IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-16T17:13:53.888Z
Updated: 2025-01-16T19:02:43.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41745 vulnerable 2026-06-03 14:56:34.916146 IBM CICS TX Standard cross-site scripting
MEDIUM (6.1)
IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2024-11-01T16:48:49.374Z
Updated: 2024-11-01T17:23:58.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41744 vulnerable 2026-06-03 14:56:34.915698 IBM CICS TX Standard cross-site request forgery
MEDIUM (6.5)
IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2024-11-01T16:53:32.755Z
Updated: 2024-11-01T17:22:23.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34310 vulnerable 2026-06-03 14:47:29.577167 IBM CICS TX information disclosure
MEDIUM (5.9)
IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229441.
Published: 2024-02-12T17:46:44.982Z
Updated: 2025-04-24T15:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.