CVE-2017-1758

IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.

• CWE-611

• http://www.ibm.com/support/docview.wss?uid=swg22012828Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22013375Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22013432Vendor Advisory
• http://www.securityfocus.com/bid/103130Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/135859VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22012828Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22013375Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22013432Vendor Advisory
• http://www.securityfocus.com/bid/103130Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/135859VDB Entry, Vendor Advisory

Published

Feb 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17574FS Care Clone 1.0 has SQL Injection via the searchJob.php jo…9.8
• CVE-2017-17575FS Groupon Clone 1.0 has SQL Injection via the item_details.…9.8
• CVE-2017-17576FS Gigs Script 1.0 has SQL Injection via the browse-category…9.8
• CVE-2017-17577FS Trademe Clone 1.0 has SQL Injection via the search_item.p…9.8
• CVE-2017-17578FS Crowdfunding Script 1.0 has SQL Injection via the latest_…9.8
• CVE-2017-17579FS Freelancer Clone 1.0 has SQL Injection via the profile.ph…9.8
• CVE-2017-17580FS Linkedin Clone 1.0 has SQL Injection via the group.php gr…9.8
• CVE-2017-17581FS Quibids Clone 1.0 has SQL Injection via the itechd.php pr…9.8
• CVE-2017-17582FS Grubhub Clone 1.0 has SQL Injection via the /food keyword…9.8
• CVE-2017-17583FS Shutterstock Clone 1.0 has SQL Injection via the /Categor…9.8
• CVE-2017-17584FS Makemytrip Clone 1.0 has SQL Injection via the show-fligh…9.8
• CVE-2017-17585FS Monster Clone 1.0 has SQL Injection via the Employer_Deta…9.8