PT-2025-2828 · Ibm · Ibm Financial Transaction Manager For Swift Services

Published 2025-01-31 · Updated 2025-08-13 · CVE-2024-49339

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.1

Description The issue allows authenticated users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a stored cross-site scripting issue.

Recommendations For versions 3.2.4.0 through 3.2.4.1, consider disabling access to the Web UI until a patch is available to prevent exploitation of the stored cross-site scripting issue. Restrict access to sensitive areas of the application to minimize the risk of credentials disclosure.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-49339

Affected Products

Ibm Financial Transaction Manager For Swift Services

References · 6

• https://ibm.com/support/pages/node/7182201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-49339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49339 · Security Note
• https://t.me/cvedetector/16959 · Telegram Post
• https://t.me/cveNotify/132116 · Telegram Post
• https://twitter.com/CVEnew/status/1885370158275051593 · Twitter Post