NVD

Id
20992  
Name
CVE-2016-5920  
Description
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-10-28  
Modified Date
2016-11-28  
Seq
2016-5920  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114357 20992 CVE-2016-5920 PI67537  View
114358 20992 CVE-2016-5920 http://www-01.ibm.com/support/docview.wss?uid=swg21989060  View
114359 20992 CVE-2016-5920 92634  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4941 JVNDB-2016-005714 IBM Financial Transaction Manager の Web UI におけるクロスサイトスクリプティングの脆弱性 IBM Financial Transaction Manager (FTM) の Web UI には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-5920 92427 CVE-2016-5920 20992 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005714.html 2016-08-19 2016-11-07 View