VULNERABILITY INTELLIGENCE

CVE-2022-34316

CVSS score3.7 LOW
EPSS probability0.72%
CISA KEVNot currently listed
Published2022-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

Weakness classification

  • psirt@us.ibm.com: CWE-644
  • nvd@nist.gov: CWE-116

Primary references