Not rated
CVE-2017-1758 IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial…
Description
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Control Center 6.1 | 6.1 → 6.1.1 | No fix stated |
| Control Center | 6.0 | No fix stated |
| Financial Transaction Manager 3.1 | 3.1.0 → 3.1.0.0 | No fix stated |
| Financial Transaction Manager 3.0 | 3.0.2 → 3.0.4.0 | No fix stated |
| Transformation Extender Advanced | 9.0 | No fix stated |
Other CVEs of Control Center
The 9 CVEs of Control Center →
CVE-2023-43052
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper…
5.3
Medium
CVE-2023-35894
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by…
5.4
Medium
CVE-2024-35114
IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable…
5.3
Medium
CVE-2024-35113
IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through…
4.3
Medium