CVE-2017-1606

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

CVE-2017-1606

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

PT-2017-14355

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for Multi-Platform MP versions 3.0.0.0 through 3.0.0.7 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling the attacker to view, add, modify, or...

CVE-2017-1606: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

CVE-2017-1538

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

CVE-2017-1538: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

PT-2017-14036

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.2 Description The issue allows an authenticated user to obtain sensitive information from an undocumented URL. Recommendations For IBM Financial Transaction...

CVE-2017-1160

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

PT-2017-12129

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.0.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentia...

CVE-2017-1160: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Design/Logic Flaw

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293...

PT-2017-12067

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager versions 3.0.1 through 3.0.2 Description The issue arises from the improper updating of the SESSIONID with each request, potentially allowing a user to obtain the ID for further attacks against the system...

CVE-2017-1152: Session Fixation

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293...

CVE-2016-5920

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3060

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5920

CVE-2016-5920 is an XSS in the Web UI of IBM Financial Transaction Manager (FTM) for ACH Services. The vulnerability affects FTM for ACH 3.0.0.x (before fp0015) and 3.0.1.0 (before iFix0002), enabling remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM’s...

CVE-2016-3060: Improper Access Control

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-6725

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services versions 3.0.0.x before fp0015 IBM Financial Transaction Manager FTM for ACH Services version 3.0.1.0 before iFix0002 Description A cross-site scripting XSS issue exists in the Web UI,...

PT-2016-5348

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 3.0.0.x before fp0015 IBM Financial Transaction Manager FTM version 3.0.1.0 before iFix0002 Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted we...