Skip to content
OpenAdvisories
Medium WID-SEC-2025-0695 4 CVEs

IBM TXSeries for Multiplatforms: Mehrere Schwachstellen

Published Apr 2, 2025 · Updated Apr 2, 2025 · de-DE

Vendor: IBM Product: TXSeries

Summary

Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM TXSeries ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben und Cross-Site-Scripting-Angriffe durchzuführen.

Product

IBM TXSeries ist eine Umgebung für "Online Transaction Processing (OLTP)".

Vulnerabilities 4

  • Medium 5.4
    CVE-2024-56475

    IBM TXSeries for Multiplatforms cross-site scripting

    IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di…

    IBM TXSeries for Multiplatforms
  • Medium 5.3
    CVE-2024-56476

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login attempt response discrepancy.

    IBM TXSeries for Multiplatforms
  • Medium 5.3
    CVE-2025-0154

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers.

    IBM TXSeries for Multiplatforms
  • Medium 4.3
    CVE-2024-56474

    IBM TXSeries for Multiplatforms cross-site request forgery

    IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

    IBM TXSeries for Multiplatforms

Revision history

  1. #1

    Initiale Fassung

References