CVE-2022-43871 MEDIUM

CVE-2022-43871: IBM Financial Transaction Manager for SWIFT Services cross-site scripting

Vendor Ibm
Product Financial Transaction Manager for SWIFT Services
Weakness CWE-79 · XSS
Published April 29, 2023
Last update January 30, 2025
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239707.

Key dates

02Disclosure timeline

April 29, 2023 CVE published
January 30, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-23714 WordPress AppReview plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-2385 Netgear SRX5308 Web Management Interface cross site scripting CVE-2026-27599 CI4MS: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS CVE-2026-13558 CodeAstro Complaint Management System Report addreport cross site scripting CVE-2025-48241 WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability