CVE-2009-0505 — The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement

Back Back to CVE browser

HIGH

The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement

Published Feb 25, 2009

9.0

HIGH

CVSS 2.0

EPSS 1.79%

Description

The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.79% 0.01788

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01788

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.79% (0.01788)	77.53th	v5 (v2026.06.15)
Jun 15, 2026	1.79% (0.01788)	75.39th	v5 (v2026.06.15)
Mar 17, 2025	0.65% (0.00650)	69.11th	v4 (v2025.03.14)
Dec 12, 2024	0.29% (0.00288)	69.75th	v3 (v2023.03.01)
Feb 8, 2024	0.29% (0.00288)	68.02th	v3 (v2023.03.01)
Apr 15, 2023	0.29% (0.00288)	64.15th	v3 (v2023.03.01)
Mar 7, 2023	0.33% (0.00334)	66.58th	v3 (v2023.03.01)
Mar 6, 2023	1.13% (0.01132)	56.11th	v2 (v2022.01.01)
Sep 22, 2022	1.13% (0.01132)	54.59th	v2 (v2022.01.01)
Apr 1, 2022	1.13% (0.01132)	52.58th	v2 (v2022.01.01)
Feb 4, 2022	1.13% (0.01132)	30.65th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

http://www-01.ibm.com/support/docview.wss?uid=swg24019725
x_refsource_CONFIRMPatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391
vendor-advisoryx_refsource_AIXAPAR
http://www.securityfocus.com/bid/33883
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0911
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/48885
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg24019725		x_refsource_CONFIRMPatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391		vendor-advisoryx_refsource_AIXAPAR
http://www.securityfocus.com/bid/33883		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0911		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/48885		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 25, 2009

Updated Aug 7, 2024

Reserved Feb 10, 2009

Link CVE-2009-0505

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0505

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0505