CVE-2023-35892 — IBM Financial Transaction Manager for SWIFT Services XML external entity injection

CVE-2023-35892

IBM Financial Transaction Manager for SWIFT Services XML external entity injection PUBLISHED

Description (CNA)

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786.

Affected (CNA)

Vendor / product	Versions
IBM / Financial Transaction Manager for SWIFT Services	affected 3.2.4

CWE

CWE-611

References

https://www.ibm.com/support/pages/node/7030359
https://exchange.xforce.ibmcloud.com/vulnerabilities/258786

ADP enrichment

CVE

No English description supplied.

https://www.ibm.com/support/pages/node/7030359
https://exchange.xforce.ibmcloud.com/vulnerabilities/258786

CISA-ADP

No English description supplied.

No references supplied.