Medium · 5.4 CVE-2024-56475 EUVD-2024-54358GHSA-28qp-rcr7-xp4g

IBM TXSeries for Multiplatforms cross-site scripting

Published Apr 2, 2025 · Updated Sep 1, 2025 · Assigned by ibm

Vendor: IBM Product: TXSeries for Multiplatforms

Description

IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Vendor	Product	Affected	Fixed
IBM	TXSeries for Multiplatforms	9.1, 11.1	—

Advisories 1

WID-SEC-2025-0695 IBM TXSeries for Multiplatforms: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 2, 2025

References

https://www.ibm.com/support/pages/node/7229880 vendor-advisory patch