CveMateVulnerability intelligence

IBM Financial Transaction Manager vulnerabilities, page 5

103 vulnerabilities

Known vulnerabilities in IBM Financial Transaction Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2026-18162ibmfinancial_transaction_manager+129d ago22-09-2026 22:10

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor.CVE-2026-18156ibmfinancial_transaction_manager+129d ago22-09-2026 22:09

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.CVE-2026-18172ibmfinancial_transaction_manager+129d ago22-09-2026 22:16

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.CVE-2026-18131ibmfinancial_transaction_manager+129d ago22-09-2026 21:47

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.CVE-2026-18066ibmfinancial_transaction_manager+129d ago22-09-2026 21:44

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.CVE-2026-18134ibmfinancial_transaction_manager+129d ago22-09-2026 22:02

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.CVE-2026-18872ibmfinancial_transaction_manager+128d ago23-09-2026 15:46

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authenticated operator browsers, enabling session hijacking and unauthorized operator-level payment actions.CVE-2026-18152ibmfinancial_transaction_manager+129d ago22-09-2026 22:06

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.CVE-2026-18132ibmfinancial_transaction_manager+129d ago22-09-2026 21:48

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.CVE-2026-18123ibmfinancial_transaction_manager+129d ago22-09-2026 21:46

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.CVE-2026-18185ibmfinancial_transaction_manager+128d ago23-09-2026 15:44

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function.CVE-2026-18124ibmfinancial_transaction_manager+129d ago22-09-2026 21:47

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.CVE-2026-18095ibmfinancial_transaction_manager+129d ago22-09-2026 21:45

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.CVE-2026-18161ibmfinancial_transaction_manager+129d ago22-09-2026 22:10

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.CVE-2026-18133ibmfinancial_transaction_manager+129d ago22-09-2026 21:50

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.CVE-2026-18181ibmfinancial_transaction_manager+128d ago23-09-2026 15:43

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.CVE-2026-18137ibmfinancial_transaction_manager+129d ago22-09-2026 22:02

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.CVE-2026-18184ibmfinancial_transaction_manager+128d ago23-09-2026 15:43

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.CVE-2026-18154ibmfinancial_transaction_manager+129d ago22-09-2026 22:07

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.CVE-2026-18179ibmfinancial_transaction_manager+128d ago23-09-2026 13:53

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization.