Ibm Financial Transaction Manager vulnerabilities
103 known vulnerabilities affecting ibm/financial_transaction_manager.
Total CVEs
103
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL10HIGH37MEDIUM50LOW6
Vulnerabilities
Page 5 of 6
CVE-2017-1160P4MEDIUMCVSS 5.4v3.0.0.0v3.0.0.1+14 more2017-04-17
CVE-2017-1160 [MEDIUM] CWE-79 CVE-2017-1160: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.
nvd
CVE-2021-29841P4MEDIUMCVSS 5.4v3.2.42021-09-14
CVE-2021-29841 [MEDIUM] CWE-79 CVE-2021-29841: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability al
IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045.
nvd
CVE-2020-5000P4MEDIUMCVSS 5.4v3.0.2v3.2.4+1 more2021-06-15
CVE-2020-5000 [MEDIUM] CWE-79 CVE-2020-5000: IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vu
IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192952.
nvd
CVE-2014-0830P4MEDIUMCVSS 4.0v2.0.0.0v2.0.0.1+2 more2014-02-01
CVE-2014-0830 [MEDIUM] CWE-22 CVE-2014-0830: Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Fin
Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname.
nvd
CVE-2016-5920P4MEDIUMCVSS 5.4v3.0.0.0v3.0.0.1+14 more2016-10-29
CVE-2016-5920 [MEDIUM] CWE-79 CVE-2016-5920: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) fo
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2016-0268P4MEDIUMCVSS 4.3≥ 3.0.0.0, ≤ 3.0.0.12v2.1.1.22018-03-09
CVE-2016-0268 [MEDIUM] CWE-611 CVE-2016-0268: XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services
XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Plat
nvd
CVE-2026-19087P4MEDIUMCVSS 4.4≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-19087 [MEDIUM] CWE-250 CVE-2026-19087: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.
nvd
CVE-2014-8917P4MEDIUMCVSS 4.3v2.0.0.0v2.0.0.1+8 more2015-01-28
CVE-2014-8917 [MEDIUM] CWE-79 CVE-2014-8917: Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka up
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow rem
nvd
CVE-2018-2026P4MEDIUMCVSS 4.3v3.2.1.0v3.2.12019-01-23
CVE-2018-2026 [MEDIUM] CWE-200 CVE-2018-2026: IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to ob
IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files. IBM X-Force ID: 155552.
nvd
CVE-2018-1393P4MEDIUMCVSS 4.3v3.0.6.0v3.0.62018-06-13
CVE-2018-1393 [MEDIUM] CWE-200 CVE-2018-1393: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authentic
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378.
nvd
CVE-2017-1152P4MEDIUMCVSS 4.3v3.0.1.0v3.0.2.02017-04-14
CVE-2017-1152 [MEDIUM] CWE-384 CVE-2017-1152: IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each r
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
nvd
CVE-2022-43875P4MEDIUMCVSS 5.5v3.2.42022-12-20
CVE-2022-43875 [MEDIUM] CWE-20 CVE-2022-43875: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authent
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034.
nvd
CVE-2018-1670P4MEDIUMCVSS 4.3v3.0.2.0v3.0.2.1+1 more2018-10-04
CVE-2018-1670 [MEDIUM] CWE-200 CVE-2018-1670: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authentic
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
nvd
CVE-2016-0232P4MEDIUMCVSS 4.3v3.0.0.0v3.0.0.1+10 more2016-02-15
CVE-2016-0232 [MEDIUM] CWE-200 CVE-2016-0232: IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.
nvd
CVE-2019-4743P4MEDIUMCVSS 4.3v3.02019-12-20
CVE-2019-4743 [MEDIUM] CWE-319 CVE-2019-4743: IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or s
IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by sno
nvd
CVE-2016-0231P4MEDIUMCVSS 4.3v3.0.0.02016-02-15
CVE-2016-0231 [MEDIUM] CWE-200 CVE-2016-0231: IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.
nvd
CVE-2019-4736P4MEDIUMCVSS 4.3v3.02019-12-20
CVE-2019-4736 [MEDIUM] CWE-352 CVE-2019-4736: IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172706.
nvd
CVE-2026-18173P4LOWCVSS 3.7≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18173 [LOW] CWE-295 CVE-2026-18173: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.
nvd
CVE-2014-0832P4LOWCVSS 3.5v2.0.0.0v2.0.0.1+1 more2014-02-01
CVE-2014-0832 [LOW] CWE-79 CVE-2014-0832: Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC comp
Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value.
nvd
CVE-2018-1392P4LOWCVSS 3.1v3.0.4.0v3.1.0.0+2 more2018-02-22
CVE-2018-1392 [LOW] CWE-200 CVE-2018-1392: IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an
IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377.
nvd