6.3
Medium
CVE-2020-4328 IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection
Description
IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Financial Transaction Manager | 3.2.4 | No fix stated |
Other CVEs of Financial Transaction Manager
The 34 CVEs of Financial Transaction Manager →
CVE-2020-4556
IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be…
4.0
Medium
CVE-2020-5026
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote…
4.3
Medium
CVE-2020-5002
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions…
4.3
Medium
CVE-2020-5001
IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the…
4.3
Medium