IBM Financial Transaction Manager 3.0.2.0 Check Services

CPE Details

IBM Financial Transaction Manager 3.0.2.0 Check Services
ibm
financial_transaction_manager
3.0.2.0
2017-05-22
14h45 +00:00
2017-05-22
14h45 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:check_services:*:*

Informations

Vendor

ibm

Product

financial_transaction_manager

Version

3.0.2.0

Target Software

check_services

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-1871 2018-12-06 14h00 +00:00 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151329.
5.4
Medium
CVE-2018-1670 2018-10-04 15h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
4.3
Medium
CVE-2018-1390 2018-03-30 16h00 +00:00 IBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138221.
5.4
Medium
CVE-2017-1538 2017-10-10 19h00 +00:00 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735.
6.5
Medium
CVE-2017-1152 2017-04-14 14h00 +00:00 IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
4.3
Medium