IBM Financial Transaction Manager (Ftm) For Redhat Openshift vulnerabilities
46 vulnerabilities
Known vulnerabilities in IBM Financial Transaction Manager (Ftm) For Redhat Openshift, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-19267ibmfinancial_transaction_manager+1
EPSS score0.13%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.CVE-2026-19087ibmfinancial_transaction_manager+1EPSS score0.09%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.CVE-2026-19179ibmfinancial_transaction_manager+1EPSS score0.30%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.CVE-2026-17618ibmfinancial_transaction_manager+1EPSS score0.24%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.CVE-2026-17636ibmfinancial_transaction_manager+1EPSS score0.51%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.CVE-2026-17645ibmfinancial_transaction_manager+1EPSS score0.35%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.CVE-2026-17644ibmfinancial_transaction_manager+1EPSS score0.10%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.CVE-2026-17635ibmfinancial_transaction_manager+1EPSS score0.35%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.CVE-2026-17620ibmfinancial_transaction_manager+1EPSS score0.21%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.CVE-2026-17643ibmfinancial_transaction_manager+1EPSS score0.10%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.CVE-2026-17647ibmfinancial_transaction_manager+1EPSS score0.22%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.CVE-2026-17646ibmfinancial_transaction_manager+1EPSS score0.29%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.CVE-2026-17637ibmfinancial_transaction_manager+1EPSS score0.24%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.CVE-2026-18114ibmfinancial_transaction_manager+1EPSS score0.43%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.CVE-2026-18176ibmfinancial_transaction_manager+1EPSS score0.13%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.CVE-2026-18875ibmfinancial_transaction_manager+1EPSS score0.22%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.CVE-2026-18153ibmfinancial_transaction_manager+1EPSS score0.15%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors.CVE-2026-18169ibmfinancial_transaction_manager+1EPSS score0.54%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.CVE-2026-18180ibmfinancial_transaction_manager+1EPSS score0.27%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.CVE-2026-18074ibmfinancial_transaction_manager+1EPSS score0.36%
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.