CVE-2023-33846

MediumCVSS 5.4

Published: 08/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

IBM TXSeries for Multiplatforms and CICS TX Standard and Advanced are vulnerable to cross-site scripting (XSS). This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Risk Assessment

The risk associated with this vulnerability is the potential disclosure of credentials, which could lead to unauthorized access to the organization's systems and data.

Recommendation

It is recommended to update to the latest version of the software and implement appropriate security measures against XSS attacks.

Original NVD description (English source)

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100.