Known vulnerabilities in Financial Transaction Manager - page 2

Software CPE: cpe:2.3:a:ibm_corporation:financial_transaction_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Financial Transaction Manager Financial Transaction Manager is affected by 56 known vulnerabilities: 8 high, 21 medium, 27 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
4.0.6.0 iFix4 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
4.0.6.0 iFix4 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
4.0.6.0 iFix4 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
4.0.6.0 iFix4 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
4.0.6.0 iFix4 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88136 - Resource exhaustion
CVE-2024-27268
CWE-400 Medium
No
No
4.0.6.0 iFix4 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU88123 - Resource exhaustion
CVE-2024-22353
CWE-400 Medium
No
No
4.0.6.0 iFix4 04.04.2024 SB2024040423
SB2024050220
SB2024050801
and 31 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270
CWE-79 Medium
No
No
4.0.6.0 iFix4 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU84490 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-35892
CWE-611 High
No
No
3.2.12 18.12.2023 SB2023121809
SB2023121942
SB2024050809
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
3.2.11.1 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU34007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4560
CWE-79 Low
No
No
- 03.08.2020 SB2020080322
SB2022061508
#VU36190 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2026
CWE-200 Low
No
No
- 23.01.2019 SB2019012313
#VU16345 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1871
CWE-79 Low
No
No
- 04.12.2018 SB2018121021
#VU36561 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-1819
CWE-89 High
No
No
- 04.10.2018 SB2018100406
#VU37036 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1393
CWE-200 Low
No
No
- 13.06.2018 SB2018061323
#VU37345 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1390
CWE-79 Low
No
No
- 30.03.2018 SB2018033018
#VU37455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0253
CWE-79 Low
No
No
- 09.03.2018 SB2018030921
#VU37456 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-0268
CWE-611 Low
No
No
- 09.03.2018 SB2018030921
#VU37457 - Cross-Site Request Forgery (CSRF)
CVE-2016-0272
CWE-352 High
No
No
- 09.03.2018 SB2018030921
#VU37458 - Security Features
CVE-2016-0274
CWE-254 Medium
No
No
- 09.03.2018 SB2018030921


Showing elements 21 - 40 out of 56