Cross-Site Scripting Vulnerability in IBM Financial Transaction Manager for ACH and Check Services
CVE-2025-33135
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 17 February 2026
What is CVE-2025-33135?
This vulnerability in IBM Financial Transaction Manager for ACH Services and Check Services allows an unauthenticated attacker to inject arbitrary JavaScript into the web interface. As a result, this could lead to unauthorized manipulation of the application's functionality and potentially expose user credentials within authenticated sessions. This exploit underscores the importance of implementing robust input validation and output encoding to mitigate such security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 3.0.0.0 <= 3.0.5.4 Interim Fix 027
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved