PT-2026-97088

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper neutralization of HTML input allows a remote attacker to execute arbitrary JavaScript within the browser of an authenticated user...

PT-2026-97090

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A path traversal issue exists that could allow a remote authenticated attacker to modify server files. Path traversal is a flaw that allows ...

PT-2026-97100

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift versions 4.0.6.0 through 4.0.10.0 Description Improper deserialization of untrusted data allows a remote attacker to execute arbitrary code. Deserialization is the process of convertin...

PT-2026-97101

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote authenticated attackers can obtain sensitive information due to improper validation of symbolic links. Symbolic links are shortcuts o...

PT-2026-97087

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information. Recommendations At the moment, there is no...

PT-2026-97103

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper restriction of XML external entity references could allow a remote attacker to obtain sensitive information. This issue involves XM...

PT-2026-97097

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper authorization in the software allows a remote authenticated attacker to bypass security controls by forging user identities...

CVE-2026-17618: Missing Authorization

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization...

CVE-2026-17646: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-17645: Improper Privilege Management

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management...

CVE-2026-17644: Use of Hard-coded Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials...

CVE-2026-17636: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity...

CVE-2026-17643: Insufficiently Protected Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...

CVE-2026-17637: Deserialization of Untrusted Data

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data...

CVE-2026-17620: Unprotected Transport of Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh Operator 4.4.6+20260807.0818004.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that...

CVE-2026-18114: Improper Limitation of a Pathname to a Restricted Directory

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...

CVE-2026-18134: Cleartext Transmission of Sensitive Information

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-18172: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-18176: Cleartext Transmission of Sensitive Information

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-18169: Improper Limitation of a Pathname to a Restricted Directory

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links...