CVE-2023-42029: IBM Cics Tx

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.

Affected products

• IBM Cics Tx: version 10.1 only; version 11.1 only
• IBM Txseries For Multiplatforms: version 8.1 only; version 8.2 only; version 9.1 only

Published 2023-11-03. Last modified 2026-06-17.