CVE-2016-5920: XSS
First published: Sat Oct 29 2016(Updated: )
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Financial Transaction Manager | =3.0.0.0 | |
| Ibm Financial Transaction Manager | =3.0.0.1 | |
| Ibm Financial Transaction Manager | =3.0.0.2 | |
| Ibm Financial Transaction Manager | =3.0.0.3 | |
| Ibm Financial Transaction Manager | =3.0.0.4 | |
| Ibm Financial Transaction Manager | =3.0.0.5 | |
| Ibm Financial Transaction Manager | =3.0.0.6 | |
| Ibm Financial Transaction Manager | =3.0.0.7 | |
| Ibm Financial Transaction Manager | =3.0.0.8 | |
| Ibm Financial Transaction Manager | =3.0.0.9 | |
| Ibm Financial Transaction Manager | =3.0.0.10 | |
| Ibm Financial Transaction Manager | =3.0.0.11 | |
| Ibm Financial Transaction Manager | =3.0.0.12 | |
| Ibm Financial Transaction Manager | =3.0.0.13 | |
| Ibm Financial Transaction Manager | =3.0.0.14 | |
| Ibm Financial Transaction Manager | =3.0.0.0 | |
| Ibm Financial Transaction Manager | =3.0.0.1 | |
| Ibm Financial Transaction Manager | =3.0.0.2 | |
| Ibm Financial Transaction Manager | =3.0.0.3 | |
| Ibm Financial Transaction Manager | =3.0.0.4 | |
| Ibm Financial Transaction Manager | =3.0.0.5 | |
| Ibm Financial Transaction Manager | =3.0.0.6 | |
| Ibm Financial Transaction Manager | =3.0.0.7 | |
| Ibm Financial Transaction Manager | =3.0.0.8 | |
| Ibm Financial Transaction Manager | =3.0.0.9 | |
| Ibm Financial Transaction Manager | =3.0.0.10 | |
| Ibm Financial Transaction Manager | =3.0.0.11 | |
| Ibm Financial Transaction Manager | =3.0.0.12 | |
| Ibm Financial Transaction Manager | =3.0.0.13 | |
| Ibm Financial Transaction Manager | =3.0.0.14 | |
| Ibm Financial Transaction Manager | =3.0.1.0 | |
| Ibm Financial Transaction Manager | =3.0.0.0 | |
| Ibm Financial Transaction Manager | =3.0.0.1 | |
| Ibm Financial Transaction Manager | =3.0.0.2 | |
| Ibm Financial Transaction Manager | =3.0.0.3 | |
| Ibm Financial Transaction Manager | =3.0.0.4 | |
| Ibm Financial Transaction Manager | =3.0.0.5 | |
| Ibm Financial Transaction Manager | =3.0.0.6 | |
| Ibm Financial Transaction Manager | =3.0.0.7 | |
| Ibm Financial Transaction Manager | =3.0.0.8 | |
| Ibm Financial Transaction Manager | =3.0.0.9 | |
| Ibm Financial Transaction Manager | =3.0.0.10 | |
| Ibm Financial Transaction Manager | =3.0.0.11 | |
| Ibm Financial Transaction Manager | =3.0.0.12 | |
| Ibm Financial Transaction Manager | =3.0.0.13 | |
| Ibm Financial Transaction Manager | =3.0.0.14 | |
| Ibm Financial Transaction Manager | =3.0.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-5920?
CVE-2016-5920 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2016-5920?
To fix CVE-2016-5920, upgrade IBM Financial Transaction Manager to version 3.0.0.x after fp0015 or 3.0.1.0 after iFix0002.
Who is affected by CVE-2016-5920?
CVE-2016-5920 affects users of IBM Financial Transaction Manager for ACH Services versions prior to the specified fixes.
What type of vulnerability is CVE-2016-5920?
CVE-2016-5920 is a cross-site scripting (XSS) vulnerability which allows remote authenticated users to inject malicious scripts.
Can CVE-2016-5920 be exploited without authentication?
No, CVE-2016-5920 requires an authenticated user to exploit the vulnerability.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/remedy
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/ibm
- canonical/ibm financial transaction manager
- version/ibm financial transaction manager/3.0.0.0
- version/ibm financial transaction manager/3.0.0.1
- version/ibm financial transaction manager/3.0.0.2
- version/ibm financial transaction manager/3.0.0.3
- version/ibm financial transaction manager/3.0.0.4
- version/ibm financial transaction manager/3.0.0.5
- version/ibm financial transaction manager/3.0.0.6
- version/ibm financial transaction manager/3.0.0.7
- version/ibm financial transaction manager/3.0.0.8
- version/ibm financial transaction manager/3.0.0.9
- version/ibm financial transaction manager/3.0.0.10
- version/ibm financial transaction manager/3.0.0.11
- version/ibm financial transaction manager/3.0.0.12
- version/ibm financial transaction manager/3.0.0.13
- version/ibm financial transaction manager/3.0.0.14
- version/ibm financial transaction manager/3.0.1.0