CVE-2026-17644
- EPSS 0.1%
- Veröffentlicht 22.09.2026 21:37:11
- Zuletzt bearbeitet 08.10.2026 13:35:03
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.
CVE-2026-17643
- EPSS 0.1%
- Veröffentlicht 22.09.2026 21:32:24
- Zuletzt bearbeitet 08.10.2026 13:37:05
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.
CVE-2026-17637
- EPSS 0.24%
- Veröffentlicht 22.09.2026 21:31:59
- Zuletzt bearbeitet 08.10.2026 13:39:41
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
CVE-2026-17636
- EPSS 0.5%
- Veröffentlicht 22.09.2026 21:30:25
- Zuletzt bearbeitet 08.10.2026 13:46:08
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
CVE-2026-17635
- EPSS 0.35%
- Veröffentlicht 22.09.2026 21:30:00
- Zuletzt bearbeitet 08.10.2026 13:46:58
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.
CVE-2026-17620
- EPSS 0.13%
- Veröffentlicht 22.09.2026 21:28:16
- Zuletzt bearbeitet 23.09.2026 19:17:27
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critica...
CVE-2026-17618
- EPSS 0.22%
- Veröffentlicht 22.09.2026 21:27:46
- Zuletzt bearbeitet 23.09.2026 18:17:07
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
CVE-2023-49880
- EPSS 0.54%
- Veröffentlicht 25.12.2023 03:15:08
- Zuletzt bearbeitet 21.11.2024 08:33:58
In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a b...
CVE-2023-35892
- EPSS 0.82%
- Veröffentlicht 05.09.2023 00:15:07
- Zuletzt bearbeitet 21.11.2024 08:08:56
IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory r...
CVE-2020-4556
- EPSS 0.19%
- Veröffentlicht 15.03.2023 19:15:24
- Zuletzt bearbeitet 21.11.2024 05:32:53
IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329.