VULNERABILITY INTELLIGENCE
CVE-2016-3060
CVSS score5.7 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2016-10-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Description
Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- psirt@us.ibm.com — Not Applicable
- psirt@us.ibm.com — Not Applicable
- psirt@us.ibm.com — Not Applicable
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108