PT-2025-2609 · Ibm · Ibm Cics Tx Standard+1

Published 2025-01-16 · Updated 2025-08-14 · CVE-2024-41746

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM CICS TX Advanced versions 10.1 through 11.1 IBM CICS TX Standard version 11.1

Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. This is a result of a stored cross-site scripting vulnerability.

Recommendations For IBM CICS TX Advanced versions 10.1 through 11.1, update to a version that includes a fix for the stored cross-site scripting vulnerability. For IBM CICS TX Standard version 11.1, update to a version that includes a fix for the stored cross-site scripting vulnerability. As a temporary workaround, consider restricting access to the Web UI to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-41746

Affected Products

Ibm Cics Tx Advanced

Ibm Cics Tx Standard

References · 7

• https://ibm.com/support/pages/node/7171873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41746 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41746 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1880038194906907052 · Twitter Post
• https://t.me/cveNotify/132291 · Telegram Post
• https://twitter.com/CVEnew/status/1880625659762131003 · Twitter Post
• https://t.me/cvedetector/15602 · Telegram Post