Skip to content
OpenAdvisories
Medium WID-SEC-2023-2785 2 CVEs

IBM TXSeries: Mehrere Schwachstellen

Published Oct 30, 2023 · Updated Oct 30, 2023 · de-DE

Vendor: IBM Product: TXSeries Product: TXSeries multiplatforms 8.1 Product: TXSeries multiplatforms 8.2 Product: TXSeries multiplatforms 9.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM TXSeries ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Cross Site Scripting Angriff Durchzuführen.

Product

IBM TXSeries ist eine Umgebung für "Online Transaction Processing (OLTP)".

Vulnerabilities 2

  • Medium 4.8
    CVE-2023-42029

    IBM CICS TX cross-site scripting

    IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot…

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • Medium 4.3
    CVE-2023-42027

    IBM CICS TX cross-site request forgery

    IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru…

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

Revision history

  1. #1

    Initiale Fassung

References