CVE-2024-49339
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Jan 31, 2025
CWE ID 79
Summary
CVE-2024-49339 is a stored cross-site scripting (XSS) vulnerability affecting IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.1. This issue permits authenticated users to inject malicious JavaScript code into the application's Web User Interface. The embedded scripts can alter the intended functionality, potentially resulting in sensitive information disclosure, such as credentials, within trusted sessions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.