6.5
CVE-2016-0276
- EPSS 0.95%
- Published 09.03.2018 19:29:00
- Last modified 21.11.2024 02:41:24
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. IBM X-Force ID: 111084.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Financial Transaction Manager SwPlatformach_services Version >= 3.0.0.0 <= 3.0.0.12
Ibm ≫ Financial Transaction Manager SwPlatformcheck_services Version >= 3.0.0.0 <= 3.0.0.12
Ibm ≫ Financial Transaction Manager SwPlatformcps_services Version >= 3.0.0.0 <= 3.0.0.12
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.742 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.3 | 2.8 | 3.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.