IBM Financial Transaction Manager

• CVE-2020-4556 Medium 4.0 IBM Financial Transaction Manager information disclosure 0.2%
• CVE-2020-5026 Medium 4.3 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is r 0.7%
• CVE-2020-5002 Medium 4.3 IBM Financial Transaction Manager security bypass 0.6%
• CVE-2020-5001 Medium 4.3 IBM Financial Transaction Manager path traversal 1.0%
• CVE-2022-43872 Medium 5.3 IBM Financial Transaction Manager information disclosure 0.5%
• CVE-2021-29841 Medium 5.4 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.5%
• CVE-2020-5000 Medium 5.4 IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended 0.5%
• CVE-2020-5003 Medium 6.5 IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive 1.8%
• CVE-2020-4555 Medium 6.3 IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328. 0.8%
• CVE-2020-4908 Medium 5.3 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks 1.1%
• CVE-2020-4907 Medium 5.3 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the b 1.3%
• CVE-2020-4906 Medium 4.0 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system. 0.3%
• CVE-2020-4905 Medium 5.9 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an 1.3%
• CVE-2020-4904 Medium 4.3 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions tr 0.5%
• CVE-2020-4560 Medium 4.7 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.9%
• CVE-2020-4328 Medium 6.3 IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete inf 1.2%