CVE Feed

    Dashboard / CVE / CVE-2016-5920

    CVE-2016-5920

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    Published:Oct 29, 2016
    Last Modified:Apr 12, 2025
    EPS:Oct 29, 2016
    EPSS Score:0.00199
    CVSS Score:5.4

    Affected Products

    Vendor
    Ibm
    Product
    Financial Transaction Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-49880 (CVSS 7.5) — In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 t…
    CVE-2023-35892 (CVSS 7.1) — IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (…
    CVE-2020-4556 (CVSS 4) — IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web p…
    CVE-2020-5026 (CVSS 4.3) — IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a re…
    CVE-2020-5002 (CVSS 4.3) — IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthoriz…
    CVE-2020-5001 (CVSS 4.3) — IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories o…
    CVE-2022-43875 (CVSS 6.2) — IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated use…
    CVE-2022-43872 (CVSS 5.3) — IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests whic…
    CVE-2019-4575 (CVSS 9.8) — IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to…
    CVE-2021-39066 (CVSS 8.8) — IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High