CVE-2016-3060

Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

• CWE-284

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64063Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64064Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg21989060Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92633
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64063Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64064Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg21989060Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92633

Published

Oct 29, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3053IBM AIX contains an unspecified vulnerability that would all…
• CVE-2016-3054Cross-site scripting (XSS) vulnerability in IBM FileNet Work…
• CVE-2016-3055IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows rem…
• CVE-2016-3056Cross-site scripting (XSS) vulnerability in Business Space i…
• CVE-2016-3057Cross-site scripting (XSS) vulnerability in IBM Sterling B2B…
• CVE-2016-3059IBM Tivoli Storage Manager for Databases: Data Protection fo…
• CVE-2016-3062The mov_read_dref function in libavformat/mov.c in Libav bef…
• CVE-2016-3063Multiple functions in NetApp OnCommand System Manager before…
• CVE-2016-3064NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before …
• CVE-2016-3065The (1) brin_page_type and (2) brin_metapage_info functions …
• CVE-2016-3066The spice-gtk widget allows remote authenticated users to ob…
• CVE-2016-3067Cygwin before 2.5.0 does not properly handle updating permis…