6.5
Medium
CVE-2026-93030 FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity…
Description
FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IBM Financial Transaction Manager (FTM) for Redhat OpenShift 4.0 | 4.0.6.0 → 4.0.10.0 | No fix stated |