CVE-2025-36147: falha de média gravidade em IBM Financial Transaction Manager for SWIFT…
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.1epss 0.3%
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVEs relacionadas — IBM Financial Transaction Manager for SWIFT…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-49349MEDIUMIBM Financial Transaction Manager cross-site scriptingEPSS 0.2%CVE-2024-49339MEDIUMIBM Financial Transaction Manager cross-site scriptingEPSS 0.2%CVE-2025-36148MEDIUMIBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.EPSS 0.2%CVE-2022-43875MEDIUMIBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of serviceEPSS 0.2%