CVE-2022-34316 LOW

CVE-2022-34316: IBM CICS TX information disclosure

Vendor Ibm

Product CICS TX

Weakness CWE-644

Published November 14, 2022

Last update April 30, 2025

View on NVD All CVEs

CVSS base score

3.7/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

Key dates

02Disclosure timeline

November 14, 2022 CVE published

April 30, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-34316 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/644.html

Related vulnerabilities

04Related CVE

CVE-2026-33149 Tandoor Recipes Vulnerable to Host Header Injection CVE-2025-27901 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows CVE-2023-47143 IBM Tivoli Application Dependency Discovery Manager HOST header injection CVE-2026-26234 JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2024-30129 HCL Nomad server on Domino is affected by a host header injection vulnerability