CVE-2020-5000: XSS
IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192952.
Other sources
IBM Financial Transaction Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-5000?
CVE-2020-5000 is a vulnerability in IBM Financial Transaction Manager 3.0.2 and 3.2.4 that allows for cross-site scripting.
How does CVE-2020-5000 impact IBM Financial Transaction Manager?
CVE-2020-5000 allows users to inject arbitrary JavaScript code into the Web UI, potentially leading to credentials disclosure within a trusted session.
How severe is CVE-2020-5000?
CVE-2020-5000 has a severity score of 5.4, which is considered medium.
Which versions of IBM Financial Transaction Manager are affected by CVE-2020-5000?
IBM Financial Transaction Manager versions 3.0.2 and 3.2.4 are affected by CVE-2020-5000.
How can I fix CVE-2020-5000?
To fix CVE-2020-5000, apply the available patch provided by IBM. You can download the patch from the IBM support page.