Unrated severityNVD Advisory· Published Sep 4, 2023· Updated Sep 26, 2024
IBM Financial Transaction Manager for SWIFT Services XML external entity injection
CVE-2023-35892
Description
IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2=3.2.4+ 1 more
- (no CPE)range: =3.2.4
- (no CPE)range: 3.2.4
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/7030359mitrevendor-advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/258786mitrevdb-entry
News mentions
0No linked articles in our index yet.