Known vulnerabilities in Financial Transaction Manager - page 2

Software CPE: cpe:2.3:a:ibm_corporation:financial_transaction_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Financial Transaction Manager Financial Transaction Manager is affected by 56 known vulnerabilities: 8 high, 21 medium, 27 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
4.0.6.0 iFix4 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
4.0.6.0 iFix4 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
4.0.6.0 iFix4 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
4.0.6.0 iFix4 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
4.0.6.0 iFix4 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88136 - Resource exhaustion
CVE-2024-27268
CWE-400 Medium
No
No
4.0.6.0 iFix4 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU88123 - Resource exhaustion
CVE-2024-22353
CWE-400 Medium
No
No
4.0.6.0 iFix4 04.04.2024 SB2024040423
SB2024050220
SB2024050801
and 31 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270
CWE-79 Medium
No
No
4.0.6.0 iFix4 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU84490 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-35892
CWE-611 High
No
No
3.2.12 18.12.2023 SB2023121809
SB2023121942
SB2024050809
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
3.2.11.1 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU39177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1160
CWE-79 Low
No
No
- 18.04.2017 SB2017041806
#VU39180 - Session Fixation
CVE-2017-1152
CWE-384 Low
No
No
- 14.04.2017 SB2017041410
#VU40062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5920
CWE-79 Low
No
No
- 29.10.2016 SB2016102902
#VU40063 - Improper Access Control
CVE-2016-3060
CWE-284 Medium
No
No
- 29.10.2016 SB2016102902
#VU40479 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0232
CWE-200 Low
No
No
- 16.02.2016 SB2016021611
#VU40480 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0231
CWE-200 Low
No
No
- 16.02.2016 SB2016021612
#VU42088 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0830
CWE-22 Low
No
No
- 01.02.2014 SB2014020102
#VU42089 - Cross-Site Request Forgery (CSRF)
CVE-2014-0831
CWE-352 Medium
No
No
- 01.02.2014 SB2014020103
#VU42090 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0832
CWE-79 Low
No
No
- 01.02.2014 SB2014020103
#VU42091 - Permissions, Privileges, and Access Controls
CVE-2014-0833
CWE-264 Low
No
No
- 01.02.2014 SB2014020103


Showing elements 21 - 40 out of 56