The vulnerability of the software tool for processing and managing financial transactions conducted through the SWIFT international messaging system allows a perpetrator to disclose protected information or compromise the accessibility of that information, due to incorrect restrictions on XML links to external objects in the IBM Financial Transaction Manager for SWIFT Services.

SWIFT processing tool vulnerability exposes protected information due to incorrect XML external object restrictions.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: XML External Entity Injection vulnerability affects IBM Financial Transaction Manager for SWIFT Services (CVE-2023-35892)	1 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is vulnerable to an XML External Entity Injection (XXE) attack	7 May 202416:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager v3.2.x is vulnerable to XML External Entity Injection (XXE)	31 Oct 202313:44	–	ibm
Circl	CVE-2023-35892	5 Sep 202307:16	–	circl
CNNVD	IBM Financial Transaction Manager for SWIFT Services Code Issue Vulnerability	4 Sep 202300:00	–	cnnvd
CVE	CVE-2023-35892	4 Sep 202323:45	–	cve
Cvelist	CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services XML external entity injection	4 Sep 202323:45	–	cvelist
EUVD	EUVD-2023-39884	3 Oct 202520:07	–	euvd
NVD	CVE-2023-35892	5 Sep 202300:15	–	nvd
Prion	Xxe	5 Sep 202300:15	–	prion