CVE-2024-41746

Summary

CVE-2024-41746 is a stored cross-site scripting (XSS) vulnerability affecting IBM CICS TX Advanced versions 10.1, 11.1, and Standard 11.1. This issue enables users to inject malicious JavaScript code into the web user interface, altering its intended functionality. Potentially, this vulnerability could lead to sensitive information, such as credentials, being disclosed within trusted sessions. Attackers could exploit this flaw by tricking users into clicking on a malicious link or visiting a compromised website. Organizations using these IBM CICS versions are urged to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.