VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2016-0268

CVE-2016-0268

Description

XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Financial Transaction Manager6 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*+ 5 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:check_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:cps_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:check_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:cps_services:*:*
  • IBM/Financial Transaction Manager (FTM) for ACH Services for Multi-Platformllm-fuzzy
    Range: < 2.1.1.2 fp0013, < 3.0.0.x fp0013
  • IBM/Financial Transaction Manager for Corporate Payment Servicesllm-fuzzy
    Range: < 2.1.1.2 fp0013, < 3.0.0.x fp0013

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.