9.1
CVE-2026-17635
- EPSS 0.35%
- Veröffentlicht 22.09.2026 21:30:00
- Zuletzt bearbeitet 08.10.2026 13:46:58
- Erkennungen
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Financial Transaction Manager SwPlatform - Version >= 4.0.7.0 < 4.0.11.0
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update - SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_1 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_2 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_3 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_4 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_5 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_6 SwPlatform -
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.258 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| IBM | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.ibm.com/support/pages/node/7288641