Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Financial Transaction Manager
Total 46 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-1152 1 Ibm 1 Financial Transaction Manager 2017-06-24 4.0 MEDIUM 4.3 MEDIUM
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
CVE-2017-1160 1 Ibm 1 Financial Transaction Manager 2017-04-25 3.5 LOW 5.4 MEDIUM
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.
CVE-2016-5920 1 Ibm 1 Financial Transaction Manager 2016-11-28 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-3060 1 Ibm 1 Financial Transaction Manager 2016-11-28 3.5 LOW 5.7 MEDIUM
Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
CVE-2016-0232 1 Ibm 1 Financial Transaction Manager 2016-03-10 4.0 MEDIUM 4.3 MEDIUM
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.
CVE-2016-0231 1 Ibm 1 Financial Transaction Manager 2016-03-10 4.0 MEDIUM 4.3 MEDIUM
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.