cbcvebase.
CVE-2023-42029
published 2023-11-03

CVE-2023-42029: IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows…

PriorityP424medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.41%
33.5th percentile
IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.

Affected

8 ranges
VendorProductVersion rangeFixed in
ibmcics_tx
ibmcics_tx
ibmcics_tx_advanced
ibmcics_tx_standard
ibmtxseries_for_multiplatforms
ibmtxseries_for_multiplatforms
ibmtxseries_for_multiplatforms
ibmtxseries_for_multiplatforms
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.