CVE-2016-3060

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Metrics

CVSS 3.0 5.7/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Oct 29, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-30628.8The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of ser CVE-2016-30637.5Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authentica CVE-2016-30646.5NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant CVE-2016-30659.1The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows atta CVE-2016-30666.5The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.CVE-2016-30679.8Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.CVE-2016-30688.8Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.CVE-2016-30698.8Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.CVE-2016-30707.8The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with m CVE-2016-30717.5Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.CVE-2016-30728.8Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow re CVE-2016-30749.8Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or