First published: Wed Jul 06 2022(Updated: )
IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM CICS TX | =11.1 | |
IBM CICS TX | =11.1 | |
Linux Linux kernel | ||
<=11.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this IBM CICS TX vulnerability is CVE-2022-34166.
The severity level of CVE-2022-34166 is medium.
The vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
To fix the IBM CICS TX vulnerability, apply the patch provided by IBM.
You can find more information about CVE-2022-34166 on the IBM X-Force ID page and the IBM support pages.