8.8
CVE-2026-17647
- EPSS 0.22%
- Veröffentlicht 22.09.2026 21:44:14
- Zuletzt bearbeitet 08.10.2026 13:07:49
- Erkennungen
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Financial Transaction Manager SwPlatform - Version >= 4.0.7.0 < 4.0.11.0
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update - SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_1 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_2 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_3 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_4 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_5 SwPlatform -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_6 SwPlatform -
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.109 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2 | 6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| IBM | 8.8 | 2 | 6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
https://www.ibm.com/support/pages/node/7288641