IBM CICS TX Advanced

Name: IBM CICS TX Advanced
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical7high20medium2low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-31767US	critical9.8	4.80% (92nd)	—	no fix	2022-06-24	≤ 11.1
CVE-2023-42031US	medium4.9	1.26% (69th)	—	no fix	2023-10-25	≤ 10.1, 11.1
CVE-2023-33850US	high7.5	1.17% (67th)	—	no fix	2023-08-22	≤ 10.1, 11.1
CVE-2022-34160US	medium5.4	1.11% (66th)	—	no fix	2022-07-08	≤ 11.1
CVE-2022-34162US	medium6.1	0.89% (59th)	—	no fix	2022-08-01	≤ 11.1
CVE-2023-33848US	medium6.5OT elevated	0.80% (56th)	—	no fix	2023-06-07	≤ 10.1, 11.1
CVE-2022-34306US	medium5.4	0.73% (54th)	—	no fix	2022-07-08	≤ 11.1
CVE-2022-34163US	medium6.1	0.73% (54th)	—	no fix	2022-08-01	≤ 11.1
CVE-2022-34167US	medium5.4	0.66% (51st)	—	no fix	2022-07-08	≤ 11.1
CVE-2022-34166US	medium5.4	0.66% (51st)	—	no fix	2022-07-08	≤ 11.1
CVE-2023-33847US	low3.1	0.63% (50th)	—	no fix	2023-06-08	≤ 10.1, 11.1
CVE-2022-34307US	medium4.3OT elevated	0.57% (47th)	—	no fix	2022-08-01	≤ 11.1
CVE-2023-38363US	medium4.3	0.57% (47th)	—	no fix	2023-11-13	≤ 10.1
CVE-2022-33955US	medium6.8	0.56% (47th)	—	no fix	2022-08-01	≤ 11.1
CVE-2023-33846US	medium5.4	0.51% (43rd)	—	no fix	2023-06-08	≤ 10.1, 11.1
CVE-2022-34309US	high7.5OT elevated	0.49% (42nd)	—	no fix	2024-02-12	≤ 11.1
CVE-2022-34310US	high7.5OT elevated	0.49% (42nd)	—	no fix	2024-02-12	≤ 11.1
CVE-2022-34161US	high8.8	0.48% (41st)	—	no fix	2022-08-01	≤ 11.1
CVE-2023-38362US	medium5.3	0.47% (41st)	—	no fix	2024-03-04	≤ 10.1
CVE-2023-38364US	medium6.1	0.45% (39th)	—	no fix	2023-11-13	≤ 10.1
CVE-2023-43018US	high7.5	0.45% (39th)	—	no fix	2023-11-03	≤ 10.1, 11.1
CVE-2023-38361US	high7.5OT elevated	0.43% (37th)	—	no fix	2023-11-18	≤ 10.1
CVE-2023-42029US	medium5.4	0.41% (35th)	—	no fix	2023-11-03	≤ 10.1, 11.1
CVE-2023-33849US	low3.7OT elevated	0.38% (32nd)	—	no fix	2023-06-07	≤ 10.1, 11.1
CVE-2022-34311US	medium4.3	0.36% (29th)	—	no fix	2024-02-12	≤ 11.1
CVE-2023-38360US	medium6.1	0.32% (24th)	—	no fix	2024-03-04	≤ 10.1
CVE-2023-42027US	high8.8	0.29% (21st)	—	no fix	2023-11-03	≤ 10.1, 11.1
CVE-2025-1331US	—	0.28% (20th)	—	no fix	2025-05-08	2 versions
CVE-2025-1330US	—	0.28% (20th)	—	no fix	2025-05-08	2 versions
CVE-2025-1329US	—	0.28% (20th)	—	no fix	2025-05-08	2 versions
CVE-2024-41746US	medium6.1	0.24% (15th)	—	no fix	2025-01-16	≤ 10.1, 11.1
CVE-2022-34308US	medium5.5	0.23% (13th)	—	no fix	2022-10-07	≤ 11.1
CVE-2022-34164US	medium5.5	0.22% (13th)	—	no fix	2022-08-01	≤ 11.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm3 CVEs
CWE-1056Invokable Control Element with Variadic Parameters2 CVEs
CWE-203Observable Discrepancy2 CVEs
CWE-311Missing Encryption of Sensitive Data2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan