CVEvulnerability

CVE-2016-3060

5.7 MEDIUM Published 2016-10-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.7 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-284

Description

Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Affected configurations

• ibm financial transaction manager 3.0.0.0 • ibm financial transaction manager 3.0.0.1 • ibm financial transaction manager 3.0.0.2 • ibm financial transaction manager 3.0.0.3 • ibm financial transaction manager 3.0.0.4 • ibm financial transaction manager 3.0.0.5 • ibm financial transaction manager 3.0.0.6 • ibm financial transaction manager 3.0.0.7 • ibm financial transaction manager 3.0.0.8 • ibm financial transaction manager 3.0.0.9 • ibm financial transaction manager 3.0.0.10 • ibm financial transaction manager 3.0.0.11 • ibm financial transaction manager 3.0.0.12 • ibm financial transaction manager 3.0.0.13 • ibm financial transaction manager 3.0.0.14 • ibm financial transaction manager 3.0.1.0

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References