https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1331.htmlhttps://patchthecve.com/cve/CVE-2025-1331.htmlWed, 17 Jun 2026 08:38:56 +0000HIGH 7.8: IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.https://patchthecve.com/cve/CVE-2025-1330.htmlhttps://patchthecve.com/cve/CVE-2025-1330.htmlWed, 17 Jun 2026 08:38:55 +0000HIGH 7.8: IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1  could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.https://patchthecve.com/cve/CVE-2025-1329.htmlhttps://patchthecve.com/cve/CVE-2025-1329.htmlWed, 17 Jun 2026 08:38:55 +0000HIGH 7.8: IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function.https://patchthecve.com/cve/CVE-2024-41746.htmlhttps://patchthecve.com/cve/CVE-2024-41746.htmlWed, 17 Jun 2026 07:48:10 +0000HIGH 7.2: IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.https://patchthecve.com/cve/CVE-2024-41745.htmlhttps://patchthecve.com/cve/CVE-2024-41745.htmlWed, 17 Jun 2026 07:48:10 +0000MEDIUM 6.1: IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.https://patchthecve.com/cve/CVE-2024-41744.htmlhttps://patchthecve.com/cve/CVE-2024-41744.htmlWed, 17 Jun 2026 07:48:10 +0000MEDIUM 6.5: IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.https://patchthecve.com/cve/CVE-2023-38360.htmlhttps://patchthecve.com/cve/CVE-2023-38360.htmlWed, 17 Jun 2026 06:09:59 +0000MEDIUM 6.1: IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260769.https://patchthecve.com/cve/CVE-2023-38362.htmlhttps://patchthecve.com/cve/CVE-2023-38362.htmlWed, 17 Jun 2026 06:09:59 +0000MEDIUM 5.3: IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses. IBM X-Force ID: 260814.https://patchthecve.com/cve/CVE-2022-34311.htmlhttps://patchthecve.com/cve/CVE-2022-34311.htmlWed, 17 Jun 2026 04:50:05 +0000MEDIUM 4.3: IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the user's session due to insufficiently protected credentials. IBM X-Force ID: 229446.https://patchthecve.com/cve/CVE-2022-34309.htmlhttps://patchthecve.com/cve/CVE-2022-34309.htmlWed, 17 Jun 2026 04:50:05 +0000MEDIUM 5.9: IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229440.https://patchthecve.com/cve/CVE-2022-34310.htmlhttps://patchthecve.com/cve/CVE-2022-34310.htmlWed, 17 Jun 2026 04:50:05 +0000MEDIUM 5.9: IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229441.