6.1

CVE-2026-18131

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Financial Transaction Manager SwPlatform - Version >= 4.0.7.0 < 4.0.11.0
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update - SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_1 SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_2 SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_3 SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_4 SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_5 SwPlatform -
   Redhat ≫ Openshift Version -
Ibm ≫ Financial Transaction Manager Version 4.0.6.0 Update interim_fix_6 SwPlatform -
   Redhat ≫ Openshift Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.15
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
IBM 8.2 2.8 4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.ibm.com/support/pages/node/7288641
Vendor Advisory