Описание
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
Ссылки
- VDB Entry
- PatchVendor Advisory
- PatchVendor Advisory
- VDB Entry
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*
cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*
EPSS
Процентиль: 61%
0.00412
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-644
CWE-116
Связанные уязвимости
CVSS3: 5.3
github
около 3 лет назад
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
EPSS
Процентиль: 61%
0.00412
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-644
CWE-116