Financial Transaction Manager@3.0.1.0 Security Vulnerabilities and Issues — Financial Transaction Manager@3.0.1.0 CVE List

Lucene search

IbmFinancial Transaction Manager3.0.1.0

3 matches found

CVE•added 2017/04/14 4:59 p.m.•50 views

CVE-2017-1152

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

4.3CVSS4.3AI score0.00134EPSS

CVE•added 2016/10/29 1:59 a.m.•38 views

CVE-2016-5920

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5.1AI score0.00199EPSS

CVE•added 2016/10/29 1:59 a.m.•37 views

CVE-2016-3060

Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

5.7CVSS5.5AI score0.00161EPSS