CVE-2020-4904: Cross-Site Request Forgery (CSRF)

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2020-4908: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system...

PT-2020-18261

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms version 3.2.4 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site...

PT-2020-18265

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms version 3.2.4 Description The issue allows the product version and release information to be returned on the login dialog. This information could potentially be used in...

PT-2020-18263

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms version 3.2.4 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Financial...

CVE-2020-4906: Insecure Storage of Sensitive Information

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system...

PT-2020-18262

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms version 3.2.4 Description The issue allows a remote attacker to obtain sensitive information due to a man-in-the-middle attack. This can be achieved through SSL stripping,...

Security Bulletin: Various security vulnerabilities in IBM Financial Transaction Manager for SWIFT Services

Summary Various security vulnerabilities in IBM Financial Transaction Manager for SWIFT Services Vulnerability Details CVEID: CVE-2020-4906 DESCRIPTION: IBM Financial Transaction Manager for SWIFT Services allows web pages to be stored locally which can be read by another user on the system. CVSS...

CVE-2020-4906

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system...

CVE-2020-4904

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2020-4560

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4328

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839...

CVE-2020-4560: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2020-18132

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.2.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2020-18006

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.2.4 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling the attacker to view, add, modify, or delete information in the back-end database...

CVE-2020-4328: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839...

Security Bulletin: Financial Transaction Manager for High Value Payments is affected by a potential SQL Injection CVE-2020-4328

Summary Financial Transaction Manager for High Value Payments FTM HVP for Multi-Platform has addressed the following vulnerability. SQL Injection on some of the screens. Vulnerability Details CVEID: CVE-2020-4328 DESCRIPTION: IBM Financial Transaction Manager is vulnerable to SQL injection. A...

CVE-2020-4560

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services v2.1.1 is affected by a validation vulnerability (CVE-2019-4519)

Summary IBM Financial Transaction Manager for Corporate Payment Services FTM CPS for Multi-Platform has addressed the following vulnerability. A potential validation vulnerability does not properly validate input which could allow an authenticated user prevent audit log entries. Vulnerability...

Security Bulletin: Financial Transaction Manager for ACH Services is affected by a potential validation vulnerability (CVE-2019-4517)

Summary IBM Financial Transaction Manager for ACH Services FTM ACH for Multi-Platform has addressed the following vulnerability. A potential validation vulnerability could allow a remote attacker to conduct phishing attacks, using an open redirect attack. Vulnerability Details CVEID: CVE-2019-451...