PT-2026-97104

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper enforcement of mutual TLS authentication could allow a remote attacker to obtain sensitive information. Mutual TLS mTLS is a proces...

CVE-2026-18066: Server-Side Request Forgery (SSRF)

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery...

PT-2026-97084

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information...

CVE-2026-18172: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-18162: Improper Control of Generation of Code

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

PT-2026-97073

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift versions 4.0.6.0 through 4.0.10.0 Interim Fix 064 Description IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext across a communication channe...

CVE-2026-17618: Missing Authorization

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization...

PT-2026-97080

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An issue exists where improper restriction of XML external entity XXE references could allow a remote authenticated attacker to obtain...

PT-2026-97074

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper configuration of HTTP method-based security constraints could allow a remote attacker to perform unauthorized actions...

CVE-2026-18169: Improper Limitation of a Pathname to a Restricted Directory

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links...

CVE-2026-18163: Deserialization of Untrusted Data

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data...

CVE-2026-18161: Insufficient Logging

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header...

CVE-2026-18137: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command...

CVE-2026-18132: Missing Authorization

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization...

CVE-2026-18124: Insufficiently Protected Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

CVE-2026-17635: Missing Authentication for Critical Function

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints...

CVE-2026-17620: Unprotected Transport of Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh Operator 4.4.6+20260807.0818004.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that...

PT-2026-97096

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A remote attacker could obtain sensitive information because the software uses a hard-coded or predictable cryptographic key. Cryptographic...

PT-2026-97102

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A remote attacker could cause a denial of service in IBM Financial Transaction Manager FTM for RedHat OpenShift. This issue occurs because t...

PT-2026-97085

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper path canonicalization allows a remote attacker to read arbitrary files. Path canonicalization is the process of converting a file...