{"vulnerability": "cve-2023-4202", "sightings": [{"uuid": "41f42bc9-5e83-4727-ba6f-a9396e12d3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-42027", "type": "seen", "source": "https://t.me/cibsecurity/73499", "content": "\u203c CVE-2023-42027 \u203c\n\nIBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 266057.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T06:23:12.000000Z"}, {"uuid": "ce0d1ac4-061e-4c28-b239-097c03701183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-42029", "type": "seen", "source": "https://t.me/cibsecurity/73495", "content": "\u203c CVE-2023-42029 \u203c\n\nIBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T06:23:08.000000Z"}, {"uuid": "d3a3c799-a21f-4dd1-b555-d0f0b42b8ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4202", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/893", "content": "Multiple Vulnerabilities (XSS) in Advantech EKI-1524-CE series, EKI-1522 series, EKI-1521 series <=1.21 (CVE-2023-4202), <=1.24 (CVE-2023-4203)\nEKI-1524-CE series / 1.21 (CVE-2023-4202)\nEKI-1522-CE series / 1.21 (CVE-2023-4202)\nEKI-1521-CE series / 1.21 (CVE-2023-4202)\nEKI-1524-CE series / 1.24 (CVE-2023-4203)\nEKI-1522-CE series / 1.24 (CVE-2023-4203)\nEKI-1521-CE series / 1.24 (CVE-2023-4203)\nPOC : https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/", "creation_timestamp": "2023-09-02T23:00:10.000000Z"}]}