Ibm Financial Transaction Manager vulnerabilities
57 known vulnerabilities affecting ibm/financial_transaction_manager.
Total CVEs
57
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH11MEDIUM37LOW5
Vulnerabilities
Page 3 of 3
CVE-2016-0268P4MEDIUMCVSS 4.3≥ 3.0.0.0, ≤ 3.0.0.12v2.1.1.22018-03-09
CVE-2016-0268 [MEDIUM] CWE-611 CVE-2016-0268: XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services
XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Plat
nvd
CVE-2014-0830P4MEDIUMCVSS 4.0v2.0.0.0v2.0.0.1+2 more2014-02-01
CVE-2014-0830 [MEDIUM] CWE-22 CVE-2014-0830: Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Fin
Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname.
nvd
CVE-2014-8917P4MEDIUMCVSS 4.3v2.0.0.0v2.0.0.1+8 more2015-01-28
CVE-2014-8917 [MEDIUM] CWE-79 CVE-2014-8917: Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka up
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow rem
nvd
CVE-2018-2026P4MEDIUMCVSS 4.3v3.2.1.0v3.2.12019-01-23
CVE-2018-2026 [MEDIUM] CWE-200 CVE-2018-2026: IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to ob
IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files. IBM X-Force ID: 155552.
nvd
CVE-2018-1393P4MEDIUMCVSS 4.3v3.0.6.0v3.0.62018-06-13
CVE-2018-1393 [MEDIUM] CWE-200 CVE-2018-1393: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authentic
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378.
nvd
CVE-2017-1152P4MEDIUMCVSS 4.3v3.0.1.0v3.0.2.02017-04-14
CVE-2017-1152 [MEDIUM] CWE-384 CVE-2017-1152: IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each r
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
nvd
CVE-2022-43875P4MEDIUMCVSS 5.5v3.2.42022-12-20
CVE-2022-43875 [MEDIUM] CWE-20 CVE-2022-43875: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authent
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034.
nvd
CVE-2018-1670P4MEDIUMCVSS 4.3v3.0.2.0v3.0.2.1+1 more2018-10-04
CVE-2018-1670 [MEDIUM] CWE-200 CVE-2018-1670: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authentic
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
nvd
CVE-2016-0232P4MEDIUMCVSS 4.3v3.0.0.0v3.0.0.1+10 more2016-02-15
CVE-2016-0232 [MEDIUM] CWE-200 CVE-2016-0232: IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.
nvd
CVE-2016-0231P4MEDIUMCVSS 4.3v3.0.0.02016-02-15
CVE-2016-0231 [MEDIUM] CWE-200 CVE-2016-0231: IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.
nvd
CVE-2019-4743P4MEDIUMCVSS 4.3v3.02019-12-20
CVE-2019-4743 [MEDIUM] CWE-319 CVE-2019-4743: IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or s
IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by sno
nvd
CVE-2019-4736P4MEDIUMCVSS 4.3v3.02019-12-20
CVE-2019-4736 [MEDIUM] CWE-352 CVE-2019-4736: IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172706.
nvd
CVE-2014-0832P4LOWCVSS 3.5v2.0.0.0v2.0.0.1+1 more2014-02-01
CVE-2014-0832 [LOW] CWE-79 CVE-2014-0832: Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC comp
Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value.
nvd
CVE-2020-4906P4LOWCVSS 3.3v3.2.42020-12-16
CVE-2020-4906 [LOW] CWE-922 CVE-2020-4906: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.
nvd
CVE-2018-1392P4LOWCVSS 3.1v3.0.4.0v3.1.0.0+2 more2018-02-22
CVE-2018-1392 [LOW] CWE-200 CVE-2018-1392: IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an
IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377.
nvd
CVE-2020-4556P4LOWCVSS 3.3≥ 3.2.0, < 3.2.11≥ 3.2.0, < 3.2.102023-03-15
CVE-2020-4556 [LOW] CVE-2020-4556: IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 al
IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329.
nvd
CVE-2016-0275P4LOWCVSS 3.3≥ 3.0.0.0, ≤ 3.0.0.12v2.1.1.22018-03-09
CVE-2016-0275 [LOW] CWE-200 CVE-2016-0275: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x befo
IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows
nvd
← Previous3 / 3