Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-11541 (GCVE-0-2026-11541)

Vulnerability from nvd – Published: 2026-06-30 20:56 – Updated: 2026-07-29 18:12

Title

Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7281750	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.1 Affected: 9.2 Affected: 9.3 Affected: 10.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11541",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T14:52:04.153923Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T14:52:15.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.1"
            },
            {
              "status": "affected",
              "version": "9.2"
            },
            {
              "status": "affected",
              "version": "9.3"
            },
            {
              "status": "affected",
              "version": "10.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-29T18:12:49.178Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7281750"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerabilities now by downloading and applying the CICS Transaction Gateway for Multiplatforms fixes.\u003c/strong\u003e\u003c/p\u003e\u003c/div\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eProduct\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eVRMF\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eAPAR\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eRemediation/First Fix\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.1.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003e-\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003ePSIRT fixes for CICS Transaction Gateway for Multiplatforms will be provided only to customers covered by Extended Support and only upon request through an IBM Support case.\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.2.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72094\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-PLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Big Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.3.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72094\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-PLXLE\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Little Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-PLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Big Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-x86Container\u0026amp;source=SAR\" rel=\"nofollow\"\u003ex86 Container Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-s390xContainer\u0026amp;source=SAR\" rel=\"nofollow\"\u003e390x Container Link\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e10.1.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72095\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-PLXLE\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Little Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-x86Container\u0026amp;source=SAR\" rel=\"nofollow\"\u003ex86 Container Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-s390xContainer\u0026amp;source=SAR\" rel=\"nofollow\"\u003e390x Container Link\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerabilities now by downloading and applying the CICS Transaction Gateway for Multiplatforms fixes.\n\n\n\nProduct\n\nVRMF\n\nAPAR\n\nRemediation/First Fix\n\nCICS Transaction Gateway for Multiplatforms9.1.0.0\n\n-\n\nPSIRT fixes for CICS Transaction Gateway for Multiplatforms will be provided only to customers covered by Extended Support and only upon request through an IBM Support case.\n\nCICS Transaction Gateway for Multiplatforms9.2.0.0\n\nPH72094\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Big Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n\n\nCICS Transaction Gateway for Multiplatforms9.3.0.0\n\nPH72094\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Little Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Big Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n x86 Container Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n 390x Container Link https://www.ibm.com/support/fixcentral/quickorder \n\nCICS Transaction Gateway for Multiplatforms10.1.0.0\n\nPH72095\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Little Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n x86 Container Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n 390x Container Link https://www.ibm.com/support/fixcentral/quickorder"
        }
      ],
      "title": "Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.",
      "x_generator": {
        "engine": "ibm-cvegen"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-11541",
    "datePublished": "2026-06-30T20:56:04.135Z",
    "dateReserved": "2026-06-08T02:55:08.653Z",
    "dateUpdated": "2026-07-29T18:12:49.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0977 (GCVE-0-2026-0977)

Vulnerability from nvd – Published: 2026-03-13 20:11 – Updated: 2026-03-16 20:10

Title

IBM CICS Transaction Gateway for Multiplatforms Information Disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.

Severity

5.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-284

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7263518	patchvendor-advisory

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.3 Affected: 10.1 cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:10.1:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0977",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T20:10:07.509831Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T20:10:20.798Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:10.1:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.3"
            },
            {
              "status": "affected",
              "version": "10.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.\u0026nbsp;"
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T20:11:00.825Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "patch",
            "vendor-advisory"
          ],
          "url": "https://www.ibm.com/support/pages/node/7263518"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerabilities now by configuring proper egress/ingress policies at either the POD or HOST level.\u0026nbsp; More details as to how to do this are described in the following CICS Transaction Gateway for Multiplatforms documentation.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVRMF\u003c/td\u003e\u003ctd\u003eRemediation/First Fix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.3\u003c/td\u003e\u003ctd\u003eRefer to this\u0026nbsp;\u003ca title=\"https://www.ibm.com/docs/en/cics-tg-multi/9.3.0?topic=security-network-policies-cics-tg-in-containers\" href=\"https://www.ibm.com/docs/en/cics-tg-multi/9.3.0?topic=security-network-policies-cics-tg-in-containers\" rel=\"nofollow\"\u003edocumentation\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e10.1\u003c/td\u003e\u003ctd\u003e\u003cp\u003eRefer to this\u0026nbsp;\u003ca title=\"https://www.ibm.com/docs/en/cics-tg-multi/10.1.0?topic=security-network-policies-cics-tg-in-containers\" href=\"https://www.ibm.com/docs/en/cics-tg-multi/10.1.0?topic=security-network-policies-cics-tg-in-containers\" rel=\"nofollow\"\u003edocumentation\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cbr\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerabilities now by configuring proper egress/ingress policies at either the POD or HOST level.\u00a0 More details as to how to do this are described in the following CICS Transaction Gateway for Multiplatforms documentation.\n\nProductVRMFRemediation/First FixCICS Transaction Gateway for Multiplatforms9.3Refer to this\u00a0 documentation https://www.ibm.com/docs/en/cics-tg-multi/9.3.0 CICS Transaction Gateway for Multiplatforms10.1Refer to this\u00a0 documentation https://www.ibm.com/docs/en/cics-tg-multi/10.1.0"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms Information Disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-0977",
    "datePublished": "2026-03-13T20:11:00.825Z",
    "dateReserved": "2026-01-15T06:53:02.974Z",
    "dateUpdated": "2026-03-16T20:10:20.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-50310 (GCVE-0-2023-50310)

Vulnerability from nvd – Published: 2024-10-23 10:55 – Updated: 2024-10-23 13:45

Title

IBM CICS Transaction Gateway for Multiplatforms information disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7145418

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.2, 9.3 cpe:2.3:a:ibm:cics_transaction_gateway:9.2:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-23T13:45:18.638182Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-23T13:45:26.181Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.2:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2, 9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval."
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T10:55:53.145Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "url": "https://www.ibm.com/support/pages/node/7145418"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms information disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-50310",
    "datePublished": "2024-10-23T10:55:53.145Z",
    "dateReserved": "2023-12-07T01:29:00.310Z",
    "dateUpdated": "2024-10-23T13:45:26.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50311 (GCVE-0-2023-50311)

Vulnerability from nvd – Published: 2024-03-31 12:00 – Updated: 2024-10-23 10:59

Title

IBM CICS Transaction Gateway for Multiplatforms information disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

ibm

References

2 references

URL	Tags
https://https://www.ibm.com/support/pages/node/7145418	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_transferred

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.2, 9.3 cpe:2.3:a:ibm:cics_transaction_gateway:9.2:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-12T21:01:58.938895Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-12T21:02:04.684Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:16:46.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://https://www.ibm.com/support/pages/node/7145418"
          },
          {
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273612"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.2:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2, 9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages."
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T10:59:46.860Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://https://www.ibm.com/support/pages/node/7145418"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms information disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-50311",
    "datePublished": "2024-03-31T12:00:11.233Z",
    "dateReserved": "2023-12-07T01:29:00.310Z",
    "dateUpdated": "2024-10-23T10:59:46.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-11541 (GCVE-0-2026-11541)

Vulnerability from cvelistv5 – Published: 2026-06-30 20:56 – Updated: 2026-07-29 18:12

Title

Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7281750	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.1 Affected: 9.2 Affected: 9.3 Affected: 10.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11541",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T14:52:04.153923Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T14:52:15.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.1"
            },
            {
              "status": "affected",
              "version": "9.2"
            },
            {
              "status": "affected",
              "version": "9.3"
            },
            {
              "status": "affected",
              "version": "10.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-29T18:12:49.178Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7281750"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerabilities now by downloading and applying the CICS Transaction Gateway for Multiplatforms fixes.\u003c/strong\u003e\u003c/p\u003e\u003c/div\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eProduct\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eVRMF\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eAPAR\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cstrong\u003eRemediation/First Fix\u003c/strong\u003e\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.1.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003e-\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003ePSIRT fixes for CICS Transaction Gateway for Multiplatforms will be provided only to customers covered by Extended Support and only upon request through an IBM Support case.\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.2.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72094\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-PLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Big Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.2.0.2-CICSTG-PH72094-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.3.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72094\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-PLXLE\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Little Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-PLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Big Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-x86Container\u0026amp;source=SAR\" rel=\"nofollow\"\u003ex86 Container Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=9.3.0.0-CICSTG-PH72094-s390xContainer\u0026amp;source=SAR\" rel=\"nofollow\"\u003e390x Container Link\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e10.1.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003ePH72095\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-AIX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eAIX Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-PLXLE\u0026amp;source=SAR\" rel=\"nofollow\"\u003epLinux Little Endian Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-WIN\u0026amp;source=SAR\" rel=\"nofollow\"\u003eWindows Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-ILNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003eiLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-ZLNX\u0026amp;source=SAR\" rel=\"nofollow\"\u003ezLinux Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-x86Container\u0026amp;source=SAR\" rel=\"nofollow\"\u003ex86 Container Link\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FWebSphere%2FCICS+Transaction+Gateway+for+Multiplatforms\u0026amp;fixids=10.1.0.0-CICSTG-PH72095-s390xContainer\u0026amp;source=SAR\" rel=\"nofollow\"\u003e390x Container Link\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerabilities now by downloading and applying the CICS Transaction Gateway for Multiplatforms fixes.\n\n\n\nProduct\n\nVRMF\n\nAPAR\n\nRemediation/First Fix\n\nCICS Transaction Gateway for Multiplatforms9.1.0.0\n\n-\n\nPSIRT fixes for CICS Transaction Gateway for Multiplatforms will be provided only to customers covered by Extended Support and only upon request through an IBM Support case.\n\nCICS Transaction Gateway for Multiplatforms9.2.0.0\n\nPH72094\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Big Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n\n\nCICS Transaction Gateway for Multiplatforms9.3.0.0\n\nPH72094\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Little Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Big Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n x86 Container Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n 390x Container Link https://www.ibm.com/support/fixcentral/quickorder \n\nCICS Transaction Gateway for Multiplatforms10.1.0.0\n\nPH72095\n\n\n\n AIX Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n pLinux Little Endian Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n Windows Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n iLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n zLinux Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n x86 Container Link https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n 390x Container Link https://www.ibm.com/support/fixcentral/quickorder"
        }
      ],
      "title": "Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.",
      "x_generator": {
        "engine": "ibm-cvegen"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-11541",
    "datePublished": "2026-06-30T20:56:04.135Z",
    "dateReserved": "2026-06-08T02:55:08.653Z",
    "dateUpdated": "2026-07-29T18:12:49.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0977 (GCVE-0-2026-0977)

Vulnerability from cvelistv5 – Published: 2026-03-13 20:11 – Updated: 2026-03-16 20:10

Title

IBM CICS Transaction Gateway for Multiplatforms Information Disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.

Severity

5.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-284

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7263518	patchvendor-advisory

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.3 Affected: 10.1 cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:10.1:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0977",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T20:10:07.509831Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T20:10:20.798Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:10.1:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.3"
            },
            {
              "status": "affected",
              "version": "10.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.\u0026nbsp;"
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T20:11:00.825Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "patch",
            "vendor-advisory"
          ],
          "url": "https://www.ibm.com/support/pages/node/7263518"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerabilities now by configuring proper egress/ingress policies at either the POD or HOST level.\u0026nbsp; More details as to how to do this are described in the following CICS Transaction Gateway for Multiplatforms documentation.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVRMF\u003c/td\u003e\u003ctd\u003eRemediation/First Fix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e9.3\u003c/td\u003e\u003ctd\u003eRefer to this\u0026nbsp;\u003ca title=\"https://www.ibm.com/docs/en/cics-tg-multi/9.3.0?topic=security-network-policies-cics-tg-in-containers\" href=\"https://www.ibm.com/docs/en/cics-tg-multi/9.3.0?topic=security-network-policies-cics-tg-in-containers\" rel=\"nofollow\"\u003edocumentation\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCICS Transaction Gateway for Multiplatforms\u003c/td\u003e\u003ctd\u003e10.1\u003c/td\u003e\u003ctd\u003e\u003cp\u003eRefer to this\u0026nbsp;\u003ca title=\"https://www.ibm.com/docs/en/cics-tg-multi/10.1.0?topic=security-network-policies-cics-tg-in-containers\" href=\"https://www.ibm.com/docs/en/cics-tg-multi/10.1.0?topic=security-network-policies-cics-tg-in-containers\" rel=\"nofollow\"\u003edocumentation\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cbr\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerabilities now by configuring proper egress/ingress policies at either the POD or HOST level.\u00a0 More details as to how to do this are described in the following CICS Transaction Gateway for Multiplatforms documentation.\n\nProductVRMFRemediation/First FixCICS Transaction Gateway for Multiplatforms9.3Refer to this\u00a0 documentation https://www.ibm.com/docs/en/cics-tg-multi/9.3.0 CICS Transaction Gateway for Multiplatforms10.1Refer to this\u00a0 documentation https://www.ibm.com/docs/en/cics-tg-multi/10.1.0"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms Information Disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-0977",
    "datePublished": "2026-03-13T20:11:00.825Z",
    "dateReserved": "2026-01-15T06:53:02.974Z",
    "dateUpdated": "2026-03-16T20:10:20.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-50310 (GCVE-0-2023-50310)

Vulnerability from cvelistv5 – Published: 2024-10-23 10:55 – Updated: 2024-10-23 13:45

Title

IBM CICS Transaction Gateway for Multiplatforms information disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7145418

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.2, 9.3 cpe:2.3:a:ibm:cics_transaction_gateway:9.2:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-23T13:45:18.638182Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-23T13:45:26.181Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.2:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2, 9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval."
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T10:55:53.145Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "url": "https://www.ibm.com/support/pages/node/7145418"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms information disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-50310",
    "datePublished": "2024-10-23T10:55:53.145Z",
    "dateReserved": "2023-12-07T01:29:00.310Z",
    "dateUpdated": "2024-10-23T13:45:26.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50311 (GCVE-0-2023-50311)

Vulnerability from cvelistv5 – Published: 2024-03-31 12:00 – Updated: 2024-10-23 10:59

Title

IBM CICS Transaction Gateway for Multiplatforms information disclosure

Summary

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

ibm

References

2 references

URL	Tags
https://https://www.ibm.com/support/pages/node/7145418	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_transferred

Impacted products

1 product

Vendor	Product	Version
IBM	CICS Transaction Gateway for Multiplatforms	Affected: 9.2, 9.3 cpe:2.3:a:ibm:cics_transaction_gateway:9.2:::::multiplatforms:: cpe:2.3:a:ibm:cics_transaction_gateway:9.3:::::multiplatforms::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-12T21:01:58.938895Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-12T21:02:04.684Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:16:46.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://https://www.ibm.com/support/pages/node/7145418"
          },
          {
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273612"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.2:*:*:*:*:multiplatforms:*:*",
            "cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "CICS Transaction Gateway for Multiplatforms",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2, 9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages."
            }
          ],
          "value": "IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T10:59:46.860Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://https://www.ibm.com/support/pages/node/7145418"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM CICS Transaction Gateway for Multiplatforms information disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-50311",
    "datePublished": "2024-03-31T12:00:11.233Z",
    "dateReserved": "2023-12-07T01:29:00.310Z",
    "dateUpdated": "2024-10-23T10:59:46.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

8 vulnerabilities found for CICS Transaction Gateway for Multiplatforms by IBM

CVE-2026-11541 (GCVE-0-2026-11541)

CVE-2026-0977 (GCVE-0-2026-0977)

CVE-2023-50310 (GCVE-0-2023-50310)

CVE-2023-50311 (GCVE-0-2023-50311)

CVE-2026-11541 (GCVE-0-2026-11541)

CVE-2026-0977 (GCVE-0-2026-0977)

CVE-2023-50310 (GCVE-0-2023-50310)

CVE-2023-50311 (GCVE-0-2023-50311)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

8 vulnerabilities found for CICS Transaction Gateway for Multiplatforms by IBM

CVE-2026-11541 (GCVE-0-2026-11541)

CVE-2026-0977 (GCVE-0-2026-0977)

CVE-2023-50310 (GCVE-0-2023-50310)

CVE-2023-50311 (GCVE-0-2023-50311)

CVE-2026-11541 (GCVE-0-2026-11541)

CVE-2026-0977 (GCVE-0-2026-0977)

CVE-2023-50310 (GCVE-0-2023-50310)

CVE-2023-50311 (GCVE-0-2023-50311)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.