CVE-2017-1606

CVE-2017-1606 affects IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0–3.0.0.7. The vulnerability is a SQL injection caused by insufficient input validation, allowing a remote attacker to view, add, modify, or delete data in the backend database. Affected product: FTM for M...

PT-2017-14355

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for Multi-Platform MP versions 3.0.0.0 through 3.0.0.7 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling the attacker to view, add, modify, or...

CVE-2017-1606: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...

Code injection

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-3060

IBM Financial Transaction Manager (FTM) exposes CVE-2016-3060 across multiple components (ACH, Check, CPS). The vulnerability allows remote authenticated attackers to hijack user click actions via a crafted site (clickjacking). Affected versions include FTM CPS v2.1.1.0–v2.1.1.3 and FTM 3.0.0.x u...

CVE-2016-5920

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3060: Improper Access Control

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-6725

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services versions 3.0.0.x before fp0015 IBM Financial Transaction Manager FTM for ACH Services version 3.0.1.0 before iFix0002 Description A cross-site scripting XSS issue exists in the Web UI,...

CVE-2016-5920: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

CVE-2016-0232

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

Code injection

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0231

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0231

IBM CVE-2016-0231 affects IBM FTM for ACH Services, Check Services and CPS (3.0.0) prior to FP12, where an authenticated user could obtain sensitive information by reading exception details in error logs. The issue is documented across IBM advisories for FTM components and is also reflected in CN...

CVE-2016-0232

CVE-2016-0232 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) in the 3.0.0.x line (and related multi‑platform/ACH/Check/CPS deployments). An authenticated remote attacker could obtain sensitive information by reading README fil...

CVE-2016-0231: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs...

CVE-2016-0232: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...

CVE-2014-0832

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...

CVE-2014-0831

CVE-2014-0831: IBM Financial Transaction Manager (FTM) 2.0 OAC is vulnerable to Cross-Site Request Forgery. An authenticated attacker could trigger edits to configuration data. Affected product: FTM 2.0 (OAC). Root cause: CSRF in the OAC component. Impact: potential unauthorized configuration cha...

CVE-2014-0830

The CVE-2014-0830 family affects IBM Financial Transaction Manager (FTM) 2.0 (before 2.0.0.3) and 2.1 (before 2.1.0.1) in the OAC component. The vulnerability is a directory traversal in the table-export function that allows an authenticated user to read arbitrary files by supplying a modified pa...