Skip to content
OpenAdvisories
Medium WID-SEC-2024-1081 3 CVEs

IBM TXSeries: Mehrere Schwachstellen

Published May 9, 2024 · Updated May 9, 2024 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM TXSeries ausnutzen, um Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.

Product

IBM TXSeries ist eine Umgebung für "Online Transaction Processing (OLTP)".

Vulnerabilities 3

  • Medium 6.2

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 8.2 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. IBM X-Force ID: 280192.

  • Medium 6.1

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191.

  • Medium 4.0

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 8.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 280190.

Revision history

  1. #1

    Initiale Fassung

References