Vulnerability Description
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
CVSS Score
3.7
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Cics Tx | 11.1 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/229452VDB Entry
- https://www.ibm.com/support/pages/node/6833176PatchVendor Advisory
- https://www.ibm.com/support/pages/node/6833178PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/229452VDB Entry
- https://www.ibm.com/support/pages/node/6833176PatchVendor Advisory
- https://www.ibm.com/support/pages/node/6833178PatchVendor Advisory
FAQ
What is CVE-2022-34316?
CVE-2022-34316 is a vulnerability with a CVSS score of 3.7 (LOW). IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
How severe is CVE-2022-34316?
CVE-2022-34316 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-34316?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Cics Tx.