IBM Financial Transaction Manager for RedHat OpenShift

Latest vulnerabilities

• CVE-2026-93030 CVSS 6.5 medium FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.
• CVE-2026-19267 CVSS 6.2 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager…
• CVE-2026-19179 CVSS 8.2 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper…
• CVE-2026-19087 CVSS 4.4 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the…
• CVE-2026-18875 CVSS 7.3 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in…
• CVE-2026-18872 CVSS 9.3 critical IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI…
• CVE-2026-18505 CVSS 5.4 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter`…
• CVE-2026-18490 CVSS 8.8 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native…
• CVE-2026-18185 CVSS 7.3 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify…
• CVE-2026-18184 CVSS 7.4 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML…
• CVE-2026-18181 CVSS 8.1 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive…
• CVE-2026-18180 CVSS 6.5 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information…
• CVE-2026-18179 CVSS 6.5 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper…
• CVE-2026-18177 CVSS 7.1 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to…
• CVE-2026-18176 CVSS 7.4 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to…
• CVE-2026-18173 CVSS 3.7 low IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper…
• CVE-2026-18172 CVSS 7.4 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper…
• CVE-2026-18170 CVSS 6.5 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation…
• CVE-2026-18169 CVSS 9.9 critical IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information…
• CVE-2026-18163 CVSS 9.8 critical IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper…
• CVE-2026-18162 CVSS 9.8 critical IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper…
• CVE-2026-18161 CVSS 4.3 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs…
• CVE-2026-18156 CVSS 6.5 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by…
• CVE-2026-18154 CVSS 8.0 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use…
• CVE-2026-18153 CVSS 5.4 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information…
• CVE-2026-18152 CVSS 7.4 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to…
• CVE-2026-18137 CVSS 8.1 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to…
• CVE-2026-18134 CVSS 7.5 high IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to…
• CVE-2026-18133 CVSS 5.4 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to…
• CVE-2026-18132 CVSS 6.5 medium IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment…