Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:financial_transaction_manager_for_swift_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductFinancial Transaction Manager For Swift Services (386af193-a780-5280-9bb0-9a1487525618)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49880 vulnerable 2026-06-08 06:16:10.680236 IBM Financial Transaction Manager for SWIFT Services data manipulation
HIGH (7.5)
In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction. IBM X-Force ID: 273183.
Published: 2023-12-25T02:24:32.216Z
Updated: 2024-08-02T22:09:48.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35892 vulnerable 2026-06-08 06:06:28.059409 IBM Financial Transaction Manager for SWIFT Services XML external entity injection
HIGH (7.1)
IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786.
Published: 2023-09-04T23:45:38.833Z
Updated: 2024-09-26T18:29:59.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43871 vulnerable 2026-06-08 05:49:34.917957 IBM Financial Transaction Manager for SWIFT Services cross-site scripting
MEDIUM (4.6)
IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239707.
Published: 2023-04-29T02:42:10.334Z
Updated: 2025-01-30T17:02:19.858Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.