IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

92 records in Financial Transaction Manager · all components

TI-2026-14946 CVE-2026-18163 · GHSA-6m6c-fmcw-xrh8

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 50

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00812 Published 2026-09-22 No fix listed CWE-502

TI-2026-14945 CVE-2026-18162 · GHSA-m36x-3cg4-5hjc

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 50

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0086 Published 2026-09-22 No fix listed CWE-94

TI-2026-14461 CVE-2026-17635 · GHSA-2vf7-w92m-26q3

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 48

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00493 Published 2026-09-22 No fix listed CWE-306

TI-2026-14446 CVE-2026-17618 · GHSA-r2w9-pqjq-xghh

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 48

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00245 Published 2026-09-22 No fix listed CWE-862

TI-2019-03018 CVE-2019-4032 · GHSA-55r4-q83q-x9x4

SQL injection in IBM Financial Transaction Manager

MEDIUM 45

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01551 Published 2019-03-05 No fix listed CWE-89

TI-2026-14950 CVE-2026-18169 · GHSA-g3fg-gxvq-88gf

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 44

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00793 Published 2026-09-22 No fix listed CWE-22

TI-2019-03354 CVE-2019-4575 · GHSA-wq3v-33f3-3c29

SQL injection in IBM Financial Transaction Manager

MEDIUM 44

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01169 Published 2022-06-15 No fix listed CWE-89

TI-2020-04203 CVE-2020-5003 · GHSA-xrhw-gpgr-r7cm

XML external entity injection in IBM Financial Transaction Manager

MEDIUM 43

IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01836 Published 2021-06-11 No fix listed CWE-611

TI-2026-15664 CVE-2026-19179 · GHSA-w654-rhwv-5m6c

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 42

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00522 Published 2026-09-23 No fix listed CWE-74

TI-2026-15442 CVE-2026-18872 · GHSA-r4f9-2vq5-44rh

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 42

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42).

CVSS 3.1CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00314 Published 2026-09-23 No fix listed CWE-79

TI-2026-14881 CVE-2026-18074 · GHSA-4j79-vxjm-8hfj

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 42

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00358 Published 2026-09-22 No fix listed CWE-287

TI-2026-15186 CVE-2026-18490 · GHSA-5p47-frcm-v44p

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 41

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint (BrmRMISSLServerSo…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00802 Published 2026-09-23 No fix listed CWE-502

TI-2026-14468 CVE-2026-17645 · GHSA-mjf8-xf3m-9g79

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 41

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00346 Published 2026-09-22 No fix listed CWE-269

TI-2026-14463 CVE-2026-17637 · GHSA-r6g2-fv62-3qp9

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 41

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00716 Published 2026-09-22 No fix listed CWE-502

TI-2026-14462 CVE-2026-17636 · GHSA-p98j-qjcq-4j29

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 41

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00746 Published 2026-09-22 No fix listed CWE-787

TI-2023-17960 CVE-2023-35892 · GHSA-j2wx-q7qw-r37w

IBM Financial Transaction Manager for SWIFT Services XML external entity injection

MEDIUM 41

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01052 Published 2023-09-04 No fix listed CWE-611

TI-2018-01602 CVE-2018-1819 · GHSA-wc7q-37v7-9rjh

SQL injection in IBM Financial Transaction Manager

MEDIUM 41

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01659 Published 2018-10-04 No fix listed CWE-89

TI-2017-01278 CVE-2017-1606 · GHSA-r878-jqm7-h2hv

SQL injection in IBM Financial Transaction Manager

MEDIUM 41

IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01436 Published 2017-12-11 No fix listed CWE-89

TI-2026-14892 CVE-2026-18095 · GHSA-j2p7-2q28-v52r

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

MEDIUM 40

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2026-09-22 No fix listed CWE-787

TI-2026-14470 CVE-2026-17647 · GHSA-9w5f-mfhx-hww2

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

LOW 39

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00169 Published 2026-09-22 No fix listed CWE-829

TI-2026-14467 CVE-2026-17644 · GHSA-hfmf-gp6x-8hxc

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

LOW 39

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00101 Published 2026-09-22 No fix listed CWE-798

TI-2026-14466 CVE-2026-17643 · GHSA-5g6q-39g7-h3g9

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

LOW 39

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00103 Published 2026-09-22 No fix listed CWE-522

TI-2021-16482 CVE-2021-39066 · GHSA-xj2w-28hg-8jjr

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session…

LOW 39

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00643 Published 2022-02-02 No fix listed CWE-384

TI-2020-04202 CVE-2020-5002 · GHSA-487g-54v9-7fxf

IBM Financial Transaction Manager security bypass

LOW 39

IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00583 Published 2023-03-01 Fixed in 3.2.10 CWE-20

TI-2018-01579 CVE-2018-1790 · GHSA-2235-mjvh-fpj2

Cross-site request forgery in IBM Financial Transaction Manager

LOW 39

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a u…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00527 Published 2019-05-10 No fix listed CWE-352

Open these records in search →

Critical	986
High	2776
Medium	5270
Low	679
No CVSS	1