IBM Corporation Financial Transaction Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in IBM Corporation Financial Transaction Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2017-1160ibm corporationfinancial transaction manager+1
EPSS score
0.54%
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.4.3CVE-2017-1152ibm corporationfinancial transaction manager+1
EPSS score
0.60%
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.