4.6 Medium

CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting

Description

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239707.

Affected products and versions

Product	Affected versions	Fixed in
Financial Transaction Manager for SWIFT Services	3.2.4	No fix stated

The 3 CVEs of Financial Transaction Manager for SWIFT Services →

CVE-2023-49880 In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending… 7.5 High CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE)… 7.1 High

Do you use Financial Transaction Manager for SWIFT Services?

Track this CVE Watch Financial Transaction Manager for SWIFT Services Check my SBOMs

www.cveye.io/en/cve/CVE-2022-43871

Timeline

Published April 29, 2023
Last modified January 30, 2025

References

www.ibm.com www.ibm.com
exchange.xforce.ibmcloud.com exchange.xforce.ibmcloud.com

Track this CVE

CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting

Description

Affected products and versions

Other CVEs of Financial Transaction Manager for SWIFT Services