CVE-2022-34316CWE-644

IBM CICS TX information disclosure

Low · published November 14, 2022

CVSS v3.1
3.7
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2022-11-14T18:47Z
EPSS history
Timeline
  • 14 NOV 18:47Z
    IBM CICS TX information disclosure
    cvelistv5