PT-2025-2829 · Ibm · Ibm Financial Transaction Manager For Swift Services

Published 2025-01-31 · Updated 2025-08-13 · CVE-2024-49349

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.1

Description The issue allows authenticated users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a stored cross-site scripting issue.

Recommendations For versions 3.2.4.0 through 3.2.4.1, consider disabling access to the Web UI until a patch is available to prevent potential exploitation of the stored cross-site scripting issue. Restrict access to sensitive areas of the application to minimize the risk of credentials disclosure.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-49349

Affected Products

Ibm Financial Transaction Manager For Swift Services

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-49349 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49349 · Vendor Advisory
• https://ibm.com/support/pages/node/7182203 · Vendor Advisory
• https://t.me/cveNotify/132117 · Telegram Post
• https://t.me/cvedetector/16960 · Telegram Post
• https://twitter.com/CVEnew/status/1885370157373284773 · Twitter Post