Known vulnerabilities in Financial Transaction Manager - page 3

Software CPE: cpe:2.3:a:ibm_corporation:financial_transaction_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Financial Transaction Manager Financial Transaction Manager is affected by 56 known vulnerabilities: 8 high, 21 medium, 27 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36560 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1670
CWE-200 Low
No
No
- 04.10.2018 SB2017101039
#VU37459 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0275
CWE-200 Low
No
No
- 09.03.2018 SB2018030921
#VU37506 - Improper input validation
CVE-2018-1391
CWE-20 Medium
No
No
- 22.02.2018 SB2018022237
#VU37507 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1392
CWE-200 Low
No
No
- 22.02.2018 SB2018022237
#VU37764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-1606
CWE-89 High
No
No
- 11.12.2017 SB20171211327
#VU38100 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1538
CWE-200 Medium
No
No
- 10.10.2017 SB2017101039
#VU39177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1160
CWE-79 Low
No
No
- 18.04.2017 SB2017041806
#VU39180 - Session Fixation
CVE-2017-1152
CWE-384 Low
No
No
- 14.04.2017 SB2017041410
#VU40062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5920
CWE-79 Low
No
No
- 29.10.2016 SB2016102902
#VU40063 - Improper Access Control
CVE-2016-3060
CWE-284 Medium
No
No
- 29.10.2016 SB2016102902
#VU40479 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0232
CWE-200 Low
No
No
- 16.02.2016 SB2016021611
#VU40480 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0231
CWE-200 Low
No
No
- 16.02.2016 SB2016021612
#VU42088 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0830
CWE-22 Low
No
No
- 01.02.2014 SB2014020102
#VU42089 - Cross-Site Request Forgery (CSRF)
CVE-2014-0831
CWE-352 Medium
No
No
- 01.02.2014 SB2014020103
#VU42090 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0832
CWE-79 Low
No
No
- 01.02.2014 SB2014020103
#VU42091 - Permissions, Privileges, and Access Controls
CVE-2014-0833
CWE-264 Low
No
No
- 01.02.2014 SB2014020103


Showing elements 41 - 60 out of 56