Skip to content

Known vulnerabilities in IBM Financial Transaction Manager

Is your version affected?

CVE Summary Score Published
CVE-2020-4556 IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be… 4.0 Medium Mar 15, 2023
CVE-2020-5026 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote… 4.3 Medium Mar 1, 2023
CVE-2020-5002 IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions… 4.3 Medium Mar 1, 2023
CVE-2020-5001 IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the… 4.3 Medium Mar 1, 2023
CVE-2022-43872 IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows… 5.3 Medium Dec 20, 2022
CVE-2019-4575 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL… 5.3 Medium Jun 15, 2022
CVE-2021-29841 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting 5.4 Medium Sep 14, 2021
CVE-2020-5000 IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting 5.4 Medium Jun 15, 2021
CVE-2020-5003 IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing… 6.5 Medium Jun 11, 2021
CVE-2020-4555 IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an… 6.3 Medium Dec 21, 2020
CVE-2020-4908 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release… 5.3 Medium Dec 16, 2020
CVE-2020-4907 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain… 5.3 Medium Dec 16, 2020
CVE-2020-4906 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally… 4.0 Medium Dec 16, 2020
CVE-2020-4905 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain… 5.9 Medium Dec 16, 2020
CVE-2020-4904 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request… 4.3 Medium Dec 16, 2020
CVE-2020-4560 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting 4.7 Medium Aug 3, 2020
CVE-2020-4328 IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection 6.3 Medium Aug 3, 2020
CVE-2019-4744 IBM Financial Transaction Manager 3.0 is vulnerable to cross-site scripting 6.1 Medium Dec 20, 2019
CVE-2019-4743 IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies 4.3 Medium Dec 20, 2019
CVE-2019-4742 IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim 6.1 Medium Dec 20, 2019
CVE-2019-4736 IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to… 4.3 Medium Dec 20, 2019
CVE-2018-1847 IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4,… 5.0 Medium Sep 18, 2019
CVE-2018-1790 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2 is vulnerable to cross-site request… 4.3 Medium May 10, 2019
CVE-2019-4032 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection 6.3 Medium Mar 5, 2019
CVE-2018-2026 IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory… 4.3 Medium Jan 23, 2019

Other IBM products