CVE-2025-1331
HIGHDescription
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| ibm | cics_tx |
| linux | linux_kernel |
References
Frequently Asked Questions
What is CVE-2025-1331? +
How severe is CVE-2025-1331? +
What products are affected by CVE-2025-1331? +
How do I check if I'm vulnerable to CVE-2025-1331? +
Related Vulnerabilities
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an …
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server …
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on …
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due …
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability …
A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this …