CVE-2017-1758

CVE-2017-1758: vulnerability in IBM Financial Transaction Manager

Published · Updated

Follow this CVE+ Monitor Financial Transaction Manager+ Monitor Control Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
Affected products
IBM · Control CenterIBM · Financial Transaction ManagerIBM · Transformation Extender Advanced
Related CVEs — IBM Financial Transaction Manager

In the same product, most dangerous first.

CVE-2018-1847MEDIUMCVE-2018-1847EPSS 2.1%CVE-2020-5003MEDIUMCVE-2020-5003EPSS 1.8%CVE-2018-1819MEDIUMCVE-2018-1819EPSS 1.7%CVE-2019-4032MEDIUMCVE-2019-4032EPSS 1.6%CVE-2017-1606—CVE-2017-1606EPSS 1.4%CVE-2018-1391—CVE-2018-1391EPSS 1.4%