Security Bulletin: Financial Transaction Manager for Corporate Payment Services: Clickjacking (CVE-2016-3060)

Summary IBM Financial Transaction Manager for Corporate Payment Services could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and...

Security Bulletin: Multiple vulnerabilities in IBM Financial Transaction Manager for ACH Services, Check Services, Corporate Payment Services (CVE-2016-5920, CVE-2016-1181, CVE-2016-1182, CVE-2016-3060)

Summary Multiple vulnerabilities in IBM Financial Transaction Manager for ACH Services, Check Services, Corporate Payment Services CVE-2016-5920, CVE-2016-1181, CVE-2016-1182, CVE-2016-3060 Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to...

CVE-2016-3060

IBM Financial Transaction Manager (FTM) exposes CVE-2016-3060 across multiple components (ACH, Check, CPS). The vulnerability allows remote authenticated attackers to hijack user click actions via a crafted site (clickjacking). Affected versions include FTM CPS v2.1.1.0–v2.1.1.3 and FTM 3.0.0.x u...