IBM Financial Transaction Manager 3.0.2.0 for CPS Services

CPE Details

IBM Financial Transaction Manager 3.0.2.0 for CPS Services
ibm
financial_transaction_manager
3.0.2.0
2017-12-29
14h59 +00:00
2017-12-29
14h59 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:cps_services:*:*

Informations

Vendor

ibm

Product

financial_transaction_manager

Version

3.0.2.0

Target Software

cps_services

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-1790 2019-05-10 14h40 +00:00 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 148944.
8.8
High
CVE-2018-1670 2018-10-04 15h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
4.3
Medium
CVE-2018-1819 2018-10-04 15h00 +00:00 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.
8.8
High
CVE-2017-1758 2018-02-21 21h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
7.1
High
CVE-2017-1538 2017-10-10 19h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735.
6.5
Medium