CVE-2024-49349
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Jan 31, 2025
CWE ID 79
Summary
CVE-2024-49349 is a stored cross-site scripting vulnerability affecting IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.1. This issue enables authenticated users to inject malicious JavaScript code into the Web UI, manipulating its functionality and potentially exposing sensitive information such as credentials during a trusted session.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.