Ibm Financial Transaction Manager vulnerabilities
103 known vulnerabilities affecting ibm/financial_transaction_manager.
Total CVEs
103
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL10HIGH37MEDIUM50LOW6
Vulnerabilities
Page 2 of 6
CVE-2026-18875P3HIGHCVSS 7.3≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-18875 [HIGH] CWE-74 CVE-2026-18875: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unau
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unau
nvd
CVE-2026-18181P3HIGHCVSS 8.1≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-18181 [HIGH] CWE-321 CVE-2026-18181: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.
nvd
CVE-2026-18185P3HIGHCVSS 7.3≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-18185 [HIGH] CWE-306 CVE-2026-18185: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function.
nvd
CVE-2026-19179P3HIGHCVSS 8.2≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-19179 [HIGH] CWE-74 CVE-2026-19179: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipu
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.
nvd
CVE-2026-18114P3HIGHCVSS 7.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18114 [HIGH] CWE-22 CVE-2026-18114: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read a
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.
nvd
CVE-2020-5002P3HIGHCVSS 8.8≥ 3.2.0, < 3.2.11≥ 3.2.0, < 3.2.102023-03-10
CVE-2020-5002 [HIGH] CWE-20 CVE-2020-5002: IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.
nvd
CVE-2020-5001P3HIGHCVSS 7.5≥ 3.2.0, ≤ 3.2.7≥ 3.2.0, < 3.2.72023-03-01
CVE-2020-5001 [HIGH] CWE-22 CVE-2020-5001: IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse dir
IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.
nvd
CVE-2026-18152P3HIGHCVSS 7.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18152 [HIGH] CWE-347 CVE-2026-18152: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
nvd
CVE-2026-17620P3HIGHCVSS 7.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-17620 [HIGH] CWE-523 CVE-2026-17620: IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
nvd
CVE-2021-39066P3HIGHCVSS 8.8v3.2.42022-02-02
CVE-2021-39066 [HIGH] CWE-384 CVE-2021-39066: IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier
IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.
nvd
CVE-2026-18154P3HIGHCVSS 7.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18154 [HIGH] CWE-321 CVE-2026-18154: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.
nvd
CVE-2026-18184P3HIGHCVSS 7.4≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-18184 [HIGH] CWE-611 CVE-2026-18184: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
nvd
CVE-2017-1758P3HIGHCVSS 7.1v3.0.2.0v3.0.2.1+7 more2018-02-21
CVE-2017-1758 [HIGH] CWE-611 CVE-2017-1758: IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to ex
nvd
CVE-2026-18134P3HIGHCVSS 7.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18134 [HIGH] CWE-319 CVE-2026-18134: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
nvd
CVE-2018-1847P3MEDIUMCVSS 6.5v2.1v2.0+28 more2019-09-18
CVE-2018-1847 [MEDIUM] CWE-22 CVE-2018-1847: IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 t
IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 through 3.0.0.8 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary fil
nvd
CVE-2016-0276P3MEDIUMCVSS 6.3≥ 3.0.0.0, ≤ 3.0.0.122018-03-09
CVE-2016-0276 [MEDIUM] CWE-20 CVE-2016-0276: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x befo
IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allo
nvd
CVE-2020-4328P3MEDIUMCVSS 6.3v3.2.42020-08-03
CVE-2020-4328 [MEDIUM] CWE-89 CVE-2020-4328: IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send
IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839.
nvd
CVE-2026-18133P3MEDIUMCVSS 6.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18133 [MEDIUM] CWE-22 CVE-2026-18133: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.
nvd
CVE-2026-18172P3HIGHCVSS 7.4≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-22
CVE-2026-18172 [HIGH] CWE-611 CVE-2026-18172: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
nvd
CVE-2026-18180P3MEDIUMCVSS 6.5≥ 4.0.7.0, < 4.0.11.0v4.0.6.0+6 more2026-09-23
CVE-2026-18180 [MEDIUM] CWE-89 CVE-2026-18180: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
nvd