IBM Financial Transaction Manager 3.1.0.0 for ACH Services

CPE Details

IBM Financial Transaction Manager 3.1.0.0 for ACH Services
ibm
financial_transaction_manager
3.1.0.0
2019-01-28
18h20 +00:00
2019-01-28
18h20 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:financial_transaction_manager:3.1.0.0:*:*:*:*:ach_services:*:*

Informations

Vendor

ibm

Product

financial_transaction_manager

Version

3.1.0.0

Target Software

ach_services

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-4032 2019-03-05 18h00 +00:00 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998.
9.8
Critical
CVE-2018-1819 2018-10-04 15h00 +00:00 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.
8.8
High
CVE-2018-1391 2018-02-22 19h00 +00:00 IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376.
6.5
Medium
CVE-2018-1392 2018-02-22 19h00 +00:00 IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377.
3.1
Low
CVE-2017-1758 2018-02-21 21h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
7.1
High