CVEvulnerability

CVE-2022-34316

5.3 MEDIUM Published 2022-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-116, CWE-644

Description

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

Affected configurations

• ibm cics tx 11.1

Related

Weakness · CWE (2)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-644 Improper Neutralization of HTTP Headers for Scripting Syntax weakness

References