IBM CICS TX Advanced version 10.1 is affected by an HTTP request smuggling vulnerability categorized under CWE-444. This vulnerability arises from inconsistent interpretation of HTTP requests and responses, potentially allowing an attacker to interfere with the processing of HTTP traffic. The CVSS v3.1 base score is 4.8 (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N), indicating that the attack requires high complexity and no privileges or user interaction, with limited confidentiality and integrity impact and no availability impact. No known exploits are reported in the wild, and no vendor patch or advisory details are provided in the input data.

The vulnerability could allow an attacker to manipulate HTTP request processing, potentially leading to limited confidentiality and integrity impacts. There is no reported impact on availability. The attack complexity is high, and no privileges or user interaction are required. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IBM advisories for updates. Until a fix is available, consider restricting access to affected versions and applying any recommended network-level mitigations specific to HTTP request smuggling if applicable.