CVE-2025-33135 IBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilities

IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 3.0.0.0 through 3.0.5.4 Interim Fix 027 IBM Financial Transaction Manager for Check Services v3 Multiplatforms is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to...

CVE-2025-33135: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 3.0.0.0 through 3.0.5.4 Interim Fix 027 IBM Financial Transaction Manager for Check Services v3 Multiplatforms is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to...

CVE-2018-1670: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946...

PT-2018-13691

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.2 Description The issue allows an authenticated user to obtain sensitive product configuration information from log files. Recommendations For version 3.0.2,...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Financial Transaction Manager for ACH Services, Check Services, and Corporate Payment Services

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7, which is used by Financial Transaction Manager FTM for ACH Services, FTM for Check Services, and FTM for Corporate Payment Services. These issues were disclosed as part of the IBM Java SDK updates in July 2017...

CVE-2018-1393: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378...

PT-2018-12253

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.6 Description The issue allows an authenticated user to execute a specially crafted command, potentially obtaining sensitive information. Recommendations For IBM...

CVE-2017-1758: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager for ACH Services for Multi-Platform IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A...

PT-2018-6536

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for ACH Services for Multi-Platform versions 3.0.2 through 3.1.0 IBM Control Center versions 6.0 through 6.1 IBM Transformation Extender Advanced version 9.0 Description: The issue allows a remote attacker to...

CVE-2017-1538: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735...

PT-2017-14036

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.2 Description The issue allows an authenticated user to obtain sensitive information from an undocumented URL. Recommendations For IBM Financial Transaction...

CVE-2017-1160: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

PT-2017-12129

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.0.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentia...

CVE-2016-5920: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-6725

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services versions 3.0.0.x before fp0015 IBM Financial Transaction Manager FTM for ACH Services version 3.0.1.0 before iFix0002 Description A cross-site scripting XSS issue exists in the Web UI,...

CVE-2016-0231: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...