CICS Transaction Gateway for Multiplatforms vulnerabilities

2 known vulnerabilities in CICS Transaction Gateway for Multiplatforms from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CICS Transaction Gateway for Multiplatforms: Inconsistent Interpretation of HTTP Requests

  CVE-2026-11541Jun 30, 2026IBM

  IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

• 7.5 High severity

  CICS Transaction Gateway for Multiplatforms: Insufficiently Protected Credentials

  CVE-2023-50310Oct 23, 2024IBM

  IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.