CVE-2018-1392: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377...

CVE-2018-1391: Undefined Security Weakness

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376...

Xxe

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1758

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1758

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1758

CVE-2017-1758 is an XML External Entity Injection (XXE) vulnerability affecting IBM Financial Transaction Manager for ACH Services for Multi-Platform and related IBM products (Control Center, Transformation Extender Advanced) per IBM advisories. Connected documents enumerate affected software and...

CVE-2017-1758: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1606

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

CVE-2017-1606

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

CVE-2017-1606: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

IBM Financial Transaction Manager SQL Injection Vulnerability

IBM Financial Transaction Manager FTM for Multi-Platform MP is a cross-platform financial transaction manager from IBM, USA, which is used to monitor, track and report on financial payments and transactions. A SQL injection vulnerability exists in IBM FTM for MP versions 3.0.0.0 through 3.0.0.7,...

IBM Financial Transaction Manager Information Disclosure Vulnerability

IBM Financial Transaction Manager FTM for ACH Services, among others, is a financial transaction manager product from IBM Corporation in the United States, which is used to monitor, track and report on financial payments and transactions. An information disclosure vulnerability exists in IBM FTM...

CVE-2017-1538

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

Design/Logic Flaw

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

CVE-2017-1538

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

CVE-2017-1538

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

CVE-2017-1538

CVE-2017-1538 affects IBM Financial Transaction Manager for ACH Services, Check Services, and CPS on Multi-Platform 3.0.2.x–3.0.4.x. An authenticated user could obtain sensitive information from an undocumented URL. IBM’s bulletin lists affected versions (3.0.2.0–3.0.2.1, 3.0.3.0, 3.0.4.0) and re...

CVE-2017-1538: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

Multiple IBM Products Session Identifier Vulnerabilities

IBM Financial Transaction Manager FTM for ACH Services, among others, is a financial transaction manager product from IBM Corporation in the United States, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in a number of IBM product...

Cross site scripting

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...