CVE-2023-33849lowCWE-311

CVE-2023-33849: low-severity vulnerability in IBM TXSeries for Multiplatforms

IBM CICS TX information disclosure

Published · Updated

Follow this CVE+ Monitor CICS TX Advanced+ Monitor CICS TX Standard

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.7epss 0.4%
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · CICS TX AdvancedIBM · CICS TX StandardIBM · TXSeries for Multiplatforms
Related CVEs — IBM TXSeries for Multiplatforms

In the same product, most dangerous first.

CVE-2022-31767CRITICALCVE-2022-31767EPSS 4.8%CVE-2023-42031MEDIUMIBM CICS TX denial of serviceEPSS 1.3%CVE-2023-33850HIGHIBM GSKit-Crypto information disclosureEPSS 1.2%CVE-2022-34160MEDIUMCVE-2022-34160EPSS 1.1%CVE-2023-38741HIGHIBM TXSeries for Multiplatforms denial of serviceEPSS 1.0%CVE-2022-34162MEDIUMCVE-2022-34162EPSS 0.9%