Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
IbmFinancial Transaction Manager

13 matches found

CVE
CVE•added 2019/12/20 5:15 p.m.•64 views

CVE-2019-4736

IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172706.

4.3CVSS5.5AI score0.00129EPSS
CVE
CVE•added 2019/12/20 5:15 p.m.•55 views

CVE-2019-4743

IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link an...

4.3CVSS5AI score0.00133EPSS
CVE
CVE•added 2015/01/28 10:59 p.m.•51 views

CVE-2014-8917

Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media ...

4.3CVSS5.9AI score0.00449EPSS
CVE
CVE•added 2023/03/15 7:15 p.m.•51 views

CVE-2020-4556

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329.

4CVSS3.3AI score0.00027EPSS
CVE
CVE•added 2017/04/14 4:59 p.m.•50 views

CVE-2017-1152

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

4.3CVSS4.3AI score0.00134EPSS
CVE
CVE•added 2018/03/09 7:29 p.m.•47 views

CVE-2016-0268

XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (F...

4.3CVSS5.1AI score0.00188EPSS
CVE
CVE•added 2016/02/15 11:59 p.m.•45 views

CVE-2016-0231

IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.

4.3CVSS4AI score0.00335EPSS
CVE
CVE•added 2016/02/15 11:59 p.m.•36 views

CVE-2016-0232

IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.

4.3CVSS4.1AI score0.00335EPSS
CVE
CVE•added 2018/10/04 3:0 p.m.•34 views

CVE-2018-1670

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.

4.3CVSS4.1AI score0.00221EPSS
CVE
CVE•added 2019/01/23 4:0 p.m.•34 views

CVE-2018-2026

IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files. IBM X-Force ID: 155552.

4.3CVSS4.2AI score0.00183EPSS
CVE
CVE•added 2020/12/16 9:15 p.m.•34 views

CVE-2020-4906

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.

4CVSS4.4AI score0.00048EPSS
CVE
CVE•added 2018/06/13 2:29 p.m.•33 views

CVE-2018-1393

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378.

4.3CVSS4.7AI score0.00212EPSS
CVE
CVE•added 2014/02/01 3:55 p.m.•32 views

CVE-2014-0830

Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname.

4CVSS6.2AI score0.00239EPSS