High · 7.1 CVE-2023-35892 EUVD-2023-39884GHSA-j2wx-q7qw-r37w

IBM Financial Transaction Manager for SWIFT Services XML external entity injection

Published Sep 4, 2023 · Updated Sep 26, 2024 · Assigned by ibm

Vendor: IBM Product: Financial Transaction Manager for SWIFT Services

Description

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786.

Affected products

Vendor	Product	Affected	Fixed
IBM	Financial Transaction Manager for SWIFT Services	3.2.4	—

References

https://www.ibm.com/support/pages/node/7030359 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/258786 vdb-entry