Medium severity5.4NVD Advisory· Published Jul 8, 2022· Updated Jun 17, 2026

CVE-2022-34306

Description

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 229435.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/CICS TX Standardllm-fuzzy2 versions
11.1+ 1 more
- (no CPE)range: 11.1
- (no CPE)range: 11.1
IBM/CICS TX Advancedllm-fuzzy2 versions
11.1+ 1 more
- (no CPE)range: 11.1
- (no CPE)range: 11.1

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/6601659nvdPatchVendor Advisory
www.ibm.com/support/pages/node/6601663nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/229435nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000