CVE-2023-33846: IBM CICS TX cross-site scripting
IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-33846 vulnerability?
CVE-2023-33846 is a cross-site scripting vulnerability in IBM CICS TX that allows users to embed arbitrary JavaScript code in the Web UI.
What is the severity of CVE-2023-33846?
CVE-2023-33846 has a severity rating of 5.4 (medium).
Which versions of IBM CICS TX are affected by CVE-2023-33846?
Versions 10.1 and 11.1 of IBM CICS TX Advanced are affected by CVE-2023-33846.
How can I fix CVE-2023-33846?
To fix CVE-2023-33846, apply the appropriate patch provided by IBM for the affected products.
Where can I find more information about CVE-2023-33846?
You can find more information about CVE-2023-33846 on the IBM X-Force Exchange website and the IBM support pages.