Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Financial Transaction Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-4575 1 Ibm 1 Financial Transaction Manager 2022-06-23 7.5 HIGH 9.8 CRITICAL
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 166801.
CVE-2020-5003 1 Ibm 1 Financial Transaction Manager 2021-06-21 6.4 MEDIUM 9.1 CRITICAL
IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192956.
CVE-2019-4032 1 Ibm 1 Financial Transaction Manager 2019-10-09 7.5 HIGH 9.8 CRITICAL
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998.