Medium · 4.8 CVE-2023-42029 EUVD-2023-46488GHSA-272j-mppr-v33q

IBM CICS TX cross-site scripting

Published Nov 2, 2023 · Updated Sep 5, 2024 · Assigned by ibm

Vendor: IBM Product: CICS TX Advanced Product: CICS TX Standard Product: TXSeries for Multiplatforms

Description

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.

Affected products

Vendor	Product	Affected	Fixed
IBM	CICS TX Standard	11.1	—
IBM	CICS TX Advanced	10.1, 11.1	—
IBM	TXSeries for Multiplatforms	8.1, 8.2, 9.1	—

Advisories 1

WID-SEC-2023-2785 IBM TXSeries: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 30, 2023

References

https://www.ibm.com/support/pages/node/7063659 vendor-advisory
https://www.ibm.com/support/pages/node/7063663 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/266059 vdb-entry