CVE-2016-0231

IBM CVE-2016-0231 affects IBM FTM for ACH Services, Check Services and CPS (3.0.0) prior to FP12, where an authenticated user could obtain sensitive information by reading exception details in error logs. The issue is documented across IBM advisories for FTM components and is also reflected in CN...

CVE-2014-0832

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...

CVE-2014-0831

CVE-2014-0831: IBM Financial Transaction Manager (FTM) 2.0 OAC is vulnerable to Cross-Site Request Forgery. An authenticated attacker could trigger edits to configuration data. Affected product: FTM 2.0 (OAC). Root cause: CSRF in the OAC component. Impact: potential unauthorized configuration cha...

CVE-2014-0830

The CVE-2014-0830 family affects IBM Financial Transaction Manager (FTM) 2.0 (before 2.0.0.3) and 2.1 (before 2.1.0.1) in the OAC component. The vulnerability is a directory traversal in the table-export function that allows an authenticated user to read arbitrary files by supplying a modified pa...

CVE-2002-0977

CVE-2002-0977 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to 4.0. The vulnerability is a buffer overflow triggered by a long TS value, permitting remote code execution. According to NVD, the exploit vector is NETWORK with low complexity and no authentication required, ...

CVE-2002-0978

CVE-2002-0978 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to version 4.0. The vulnerability allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle (MITM) attack that can modify TGT and TGN parameters in a call to th...