CVE-2016-5920

CVE-2016-5920 is an XSS in the Web UI of IBM Financial Transaction Manager (FTM) for ACH Services. The vulnerability affects FTM for ACH 3.0.0.x (before fp0015) and 3.0.1.0 (before iFix0002), enabling remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM’s...

CVE-2016-3341

The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."...

Privilege escalation

The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."...

Microsoft Transaction Manager Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in Windows Transaction Manager fails to properly handle memory objects. It could allow an attacker to take control of an affected system via a constructed application...

MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit these, via a special...

Windows Transaction Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability ...

Microsoft Windows Transaction Manager Elevation of Privilege (MS16-123: CVE-2016-3341)

An elevation of privilege vulnerability has been reported in Microsoft Windows Kernel Transaction Manager. The vulnerability is due to an malformed blf file, which could be abused by attackers to gain local privilege escalation. The attacker must entice the victim to run an executable file to...

IBM Financial Transaction Manager for ACH Cross-Site Scripting Vulnerability

IBM Financial Transaction Manager FTM for ACH Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A cross-site scripting vulnerability exists in Financial Transaction Manager FTM for ACH Services...

IBM Financial Transaction Manager Clickjacking Vulnerability

IBM Financial Transaction Manager FTM is a financial transaction manager from IBM Corporation in the United States that is used to monitor, track and report on financial payments and transactions. A clickjacking vulnerability exists in IBM Financial Transaction Manager FTM versions 3.0.0.0 throug...

IBM Financial Transaction Manager for Corporate Payment Services Cross-Site Scripting Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A cross-site scripting vulnerability in IBM FTM for Corporate Payment Services on multiple platforms...

IBM Financial Transaction Manager for Corporate Payment Services Local Information Disclosure Vulnerability

IBM Financial Transaction Manager FTM for Corporate Payment Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in IBM FTM for Corporate Payment Services on multiple...

IBM Financial Transaction Manager for Corporate Payment Services Cross-Site Request Forgery Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A cross-site request forgery vulnerability exists in IBM FTM for Corporate Payment Services on multip...

IBM Financial Transaction Manager for Corporate Payment Services Clickjacking Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A clickjacking vulnerability exists in IBM FTM for Corporate Payment Services on multiple platforms,...

IBM Financial Transaction Manager for Corporate Payment Services Information Disclosure Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A security vulnerability in IBM FTM for Corporate Payment Services processing XML files on multiple...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2016-01146)

IBM Financial Transaction Manager FTM for ACH Services, among others, is a financial transaction manager product from IBM Corporation in the United States, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in several IBM products. A...

Multiple IBM Products Information Disclosure Vulnerabilities (CNVD-2016-01151)

IBM Financial Transaction Manager for ACH Services, among others, are IBM's financial transaction manager products, which are used to monitor, track and report on financial payments and transactions. A security vulnerability exists in several IBM products. A remote attacker could exploit the...

CVE-2016-0232

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

CVE-2016-0231

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

Code injection

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

Design/Logic Flaw

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...