CVSS: 5.4EPSS: 0%CPEs: 6EXPL: 0CVE-2016-0253
https://notcve.org/view.php?id=CVE-2016-0253
Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110562. Vulnerabilidad de Cross-Site Scripting (XSS) en IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013; Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 y Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores sin especificar. IBM X-Force ID: 110562. • http://www-01.ibm.com/support/docview.wss?uid=swg21977245 https://exchange.xforce.ibmcloud.com/vulnerabilities/110562 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2016-0268
https://notcve.org/view.php?id=CVE-2016-0268
XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915. Vulnerabilidad de XEE (XML External Entity) en IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013; Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 y Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 permite que usuarios autenticados remotos obtengan información sensible mediante datos XML manipulados. IBM X-Force ID: 110915. • http://www-01.ibm.com/support/docview.wss?uid=swg21977245 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-1391
https://notcve.org/view.php?id=CVE-2018-1391
IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376. IBM Financial Transaction Manager 3.0.4 y 3.1.0 para ACH Services Multi-Platform podría permitir que un usuario autenticado ejecute un comando especialmente manipulado que podría provocar una denegación de servicio. IBM X-Force ID: 138376. • http://www.ibm.com/support/docview.wss?uid=swg22013247 http://www.securityfocus.com/bid/103352 https://exchange.xforce.ibmcloud.com/vulnerabilities/138376 •
CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-1392
https://notcve.org/view.php?id=CVE-2018-1392
IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377. IBM Financial Transaction Manager 3.0.4 y 3.1.0 para ACH Services Multi-Platform podría permitir que un usuario autenticado ejecute un comando especialmente manipulado que podría obtener información sensible. IBM X-Force ID: 138377. • http://www.ibm.com/support/docview.wss?uid=swg22013249 https://exchange.xforce.ibmcloud.com/vulnerabilities/138377 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.1EPSS: 0%CPEs: 12EXPL: 0CVE-2017-1758
https://notcve.org/view.php?id=CVE-2017-1758
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859. IBM Financial Transaction Manager para ACH Services Multi-Platform (IBM Control Center 6.0 y 6.1; IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4 y 3.1.0; IBM Transformation Extender Advanced 9.0) es vulnerable a un ataque de XEE (XML External Entity) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. • http://www.ibm.com/support/docview.wss?uid=swg22012828 http://www.ibm.com/support/docview.wss?uid=swg22013375 http://www.ibm.com/support/docview.wss?uid=swg22013432 http://www.securityfocus.com/bid/103130 https://exchange.xforce.ibmcloud.com/vulnerabilities/135859 • CWE-611: Improper Restriction of XML External Entity Reference •