CVE-2022-34316

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

Score

CVSS 3.1 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-11-14

Last modified

2025-04-30

Weaknesses

CWE-116, CWE-644

Affected products

• Cics Tx (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/229452
• https://www.ibm.com/support/pages/node/6833176
• https://www.ibm.com/support/pages/node/6833178