IBM Txseries For Multiplatform vulnerabilities

7 CVEs affecting IBM Txseries For Multiplatform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22345, published 2024-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-33850, published 2023-08-22. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial…
CVE-2023-38741, published 2023-08-14. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type…
CVE-2023-33847, published 2023-06-08. Low severity, CVSS 3.1. EPSS: 0.6% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be…
CVE-2024-22345, published 2024-05-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.2 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. IBM X-Force ID: …
CVE-2023-33846, published 2023-06-08. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2024-22344, published 2024-05-14. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the…
CVE-2024-22343, published 2024-05-14. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM TXSeries for Multiplatforms 8.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 280190.