Vulnerability · Published May 8, 2025 · Assigned by ibm
CVE-2025-1330IBM CICS TX code execution
High 7.8
In plain English
A high-severity out-of-bounds write in CICS TX Advanced from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 79.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | CICS TX Standard | 11.1 |
| IBM | CICS TX Advanced | 10.111.1 |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7232923 vendor-advisory, patch
- https://www.ibm.com/support/pages/node/7232924 vendor-advisory, patch