Skip to content
OpenAdvisories
Unscored CVE-2017-1160 EUVD-2017-10176GHSA-vwj7-6g36-32g6

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability all…

Published Apr 17, 2017 · Updated Aug 5, 2024 · Assigned by ibm

Vendor: IBM Product: Financial Transaction Manager

Description

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.

Affected products

VendorProductAffectedFixed
IBM Financial Transaction Manager 3.0.0.0, 3.0.0.1, 3.0.0.2, 3.0.0.3, 3.0.0.4, 3.0.0.5, 3.0.0.6, 3.0.0.7, 3.0.0.8, 3.0.0.9, 3.0.0.10, 3.0.0.11, 3.0.0.12, 3.0.0.13, 3.0.0.14, 3.0.0.15 —

References