Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

IBM TXSeries: Authenticated User Can Alter Web Interface

CVE-2024-56475 · published 1 year ago
Summary

IBM TXSeries for Multiplatforms versions 9.1 and 11.1 have a weakness that allows an authorized user to inject malicious code into the system's web interface. This could potentially expose sensitive information, such as login credentials, within a secure session. To protect against this, update to a fixed version or take other security measures as recommended by IBM.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm txseries_for_multiplatforms 9.1
11.1
cpe:2.3:a:ibm:txseries_for_multiplatforms:9.1:*:*:*:*:*:*:*
Original advisory text
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering th...
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published2 Apr 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-56475 · NVD
CVE-2024-56475 · OSV
Track software like this
Free during beta