CVE-2016-0276

CVE-2016-0276 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services on Multi-Platform. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted serialized Java Message Service (JMS) ObjectMessage. Affected ...

Google Android LG Bootloader Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.LG Bootloader is one of the bootloaders. A local boost vulnerability exists in DisplayFtmItem of LG Bootloader in Android, which stems from the program reading a string without...

Sql injection

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

CVE-2017-1606

CVE-2017-1606 affects IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0–3.0.0.7. The vulnerability is a SQL injection caused by insufficient input validation, allowing a remote attacker to view, add, modify, or delete data in the backend database. Affected product: FTM for M...

Code injection

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-5920

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3060

IBM Financial Transaction Manager (FTM) exposes CVE-2016-3060 across multiple components (ACH, Check, CPS). The vulnerability allows remote authenticated attackers to hijack user click actions via a crafted site (clickjacking). Affected versions include FTM CPS v2.1.1.0–v2.1.1.3 and FTM 3.0.0.x u...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

CVE-2016-0232

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

Code injection

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0231

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0232

CVE-2016-0232 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) in the 3.0.0.x line (and related multi‑platform/ACH/Check/CPS deployments). An authenticated remote attacker could obtain sensitive information by reading README fil...

CVE-2016-0231

IBM CVE-2016-0231 affects IBM FTM for ACH Services, Check Services and CPS (3.0.0) prior to FP12, where an authenticated user could obtain sensitive information by reading exception details in error logs. The issue is documented across IBM advisories for FTM components and is also reflected in CN...

CVE-2014-0832

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...

CVE-2014-0831

CVE-2014-0831: IBM Financial Transaction Manager (FTM) 2.0 OAC is vulnerable to Cross-Site Request Forgery. An authenticated attacker could trigger edits to configuration data. Affected product: FTM 2.0 (OAC). Root cause: CSRF in the OAC component. Impact: potential unauthorized configuration cha...

CVE-2014-0830

The CVE-2014-0830 family affects IBM Financial Transaction Manager (FTM) 2.0 (before 2.0.0.3) and 2.1 (before 2.1.0.1) in the OAC component. The vulnerability is a directory traversal in the table-export function that allows an authenticated user to read arbitrary files by supplying a modified pa...

CVE-2002-0977

CVE-2002-0977 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to 4.0. The vulnerability is a buffer overflow triggered by a long TS value, permitting remote code execution. According to NVD, the exploit vector is NETWORK with low complexity and no authentication required, ...

CVE-2002-0978

CVE-2002-0978 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to version 4.0. The vulnerability allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle (MITM) attack that can modify TGT and TGN parameters in a call to th...