What’s Vulnerable › Vulnerabilities
CVE-2023-49880: IBM Financial Transaction Manager for SWIFT Services data manipulation
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-12-25 · updated 2026-06-17
Description
In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction. IBM X-Force ID: 273183.
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/273183
- https://www.ibm.com/support/pages/node/7101167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/273183
- https://www.ibm.com/support/pages/node/7101167
Get alerted when CVE-2023-49880 or the next vulnerability affects your stack