PT-2018-4593

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013...

CVE-2016-0272: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manage...

CVE-2016-0274: Undefined Security Weakness

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2016-0276: Improper Input Validation

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2016-0253: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM f...

PT-2018-4595

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013...

PT-2018-4596

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013...

PT-2018-4598

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013...

CVE-2016-0275: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2016-0268: Improper Restriction of XML External Entity Reference

XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...

CVE-2018-1391

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376...

PT-2018-12251

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager versions 3.0.4 through 3.1.0 Description The issue allows an authenticated user to execute a specially crafted command, potentially causing a denial of service. Recommendations For versions 3.0.4 through 3.1.0...

CVE-2018-1391: Undefined Security Weakness

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376...

CVE-2018-1392: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377...

PT-2018-12252

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager versions 3.0.4 through 3.1.0 Description The issue allows an authenticated user to execute a specially crafted command, potentially obtaining sensitive information. Recommendations For versions 3.0.4 through...

Xxe

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1758

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

PT-2018-6536

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for ACH Services for Multi-Platform versions 3.0.2 through 3.1.0 IBM Control Center versions 6.0 through 6.1 IBM Transformation Extender Advanced version 9.0 Description: The issue allows a remote attacker to...

CVE-2017-1758: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

CVE-2017-1606

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...