CVE-2014-3042: IBM Cics Transaction Server

Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.

Affected products

• IBM Cics Transaction Server: affected versions not specified; version 3.1 only; version 3.2 only; version 4.1 only; version 5.1 only

Published 2014-06-10. Last modified 2026-06-17.