Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:financial_transaction_manager_for_multiplatform:3.2.4:*:*:*:*:*:*:*

part: a version: 3.2.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductFinancial Transaction Manager For Multiplatform (db32bb4a-2281-5351-ab0f-2fa0da5c1dd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43871 vulnerable 2026-06-08 05:49:34.918853 IBM Financial Transaction Manager for SWIFT Services cross-site scripting
MEDIUM (4.6)
IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239707.
Published: 2023-04-29T02:42:10.334Z
Updated: 2025-01-30T17:02:19.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4908 vulnerable 2026-06-08 05:26:41.166582 Details available
MEDIUM (5.3)
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system.
Published: 2020-12-16T20:35:29.958Z
Updated: 2024-09-17T00:05:32.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4907 vulnerable 2026-06-08 05:26:41.166136 Details available
MEDIUM (5.3)
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2020-12-16T20:35:29.313Z
Updated: 2024-09-17T02:37:04.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4906 vulnerable 2026-06-08 05:26:41.165779 Details available
MEDIUM (4)
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.
Published: 2020-12-16T20:35:28.667Z
Updated: 2024-09-16T17:48:50.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4905 vulnerable 2026-06-08 05:26:41.165240 Details available
MEDIUM (5.9)
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to obtain sensitive information.
Published: 2020-12-16T20:35:28.033Z
Updated: 2024-09-16T19:30:11.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4904 vulnerable 2026-06-08 05:26:41.164688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4328 vulnerable 2026-06-08 05:25:59.202396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.