First published: Wed Jul 06 2022(Updated: )
IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM CICS Transaction Server for z/OS | <=11.1 | |
IBM CICS Transaction Server for z/OS | =11.1 | |
IBM CICS Transaction Server for z/OS | =11.1 | |
Linux kernel |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this IBM CICS TX vulnerability is CVE-2022-34166.
The severity level of CVE-2022-34166 is medium.
The vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
To fix the IBM CICS TX vulnerability, apply the patch provided by IBM.
You can find more information about CVE-2022-34166 on the IBM X-Force ID page and the IBM support pages.