Lucene search

IBMC7ED6CDC1DDD2454D5CEAF7F4494203989C72B55C67F36BEFE74F33B1CA521F2

HistoryJun 06, 2023 - 3:09 p.m.

Security Bulletin: "Reflected Cross Site Scripting" may affect IBM CICS TX Advanced

2023-06-0615:09:01

www.ibm.com

ibm cics

cross site scripting

vulnerability

fix

remediation

linux

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.1%

JSON

Summary

“Reflected Cross Site Scripting” may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2023-33846
**DESCRIPTION:**IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257100 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM CICS TX Advanced	10.1
IBM CICS TX Advanced	11.1

Remediation/Fixes

Product	Version	Platform	Remediation/Fix
IBM CICS TX Advanced

10.1

| Linux| Fix Central Link
IBM CICS TX Advanced|

11.1

| Linux| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmcics_txMatch10.1

ibmcics_txMatch11.1

VendorProductVersionCPE
ibmcics_tx10.1cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:*:*:*:*
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cics_tx	10.1	cpe:2.3:a:ibm:cics_tx:10.1:::::::*
ibm	cics_tx	11.1	cpe:2.3:a:ibm:cics_tx:11.1:::::::*