{"id":"CVE-2016-3060","aliases":["EUVD-2016-4133","GHSA-wcm9-qmw5-8964"],"status":"published","title":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services,...","description":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.","severity":{"version":"3.0","score":5.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00796,"percentile":0.56692,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2016-10-29T01:00:00Z","modified":"2026-06-17T00:44:53Z","products":[{"vendor":"ibm","product":"financial_transaction_manager"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI64064","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI64063","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989060","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Not Applicable"]},{"url":"http://www.securityfocus.com/bid/92633","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3060"},{"url":"https://github.com/advisories/GHSA-wcm9-qmw5-8964"}],"sources":{"cve":[{"id":"CVE-2016-3060","description":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.","status":"published","published":"2016-10-29T01:00:00Z","modified":"2024-08-05T23:40:15.23Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4133","description":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.","status":"published","published":"2016-10-29T01:00:00Z","modified":"2024-08-05T23:40:15Z","updated_at":"2026-11-03T02:22:51.669902Z"}],"ghsa":[{"id":"GHSA-wcm9-qmw5-8964","title":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services,...","description":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.","status":"published","published":"2022-05-17T03:42:18Z","modified":"2023-01-27T05:07:34Z","cvss":[{"version":"3.0","score":5.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:43:08.798618Z"}],"nvd":[{"id":"CVE-2016-3060","description":"Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.","status":"published","published":"2016-10-29T01:59:12.697Z","modified":"2026-06-17T00:44:53.613Z","cvss":[{"version":"3.0","score":5.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:32.086916Z"}]}}