8.5
High
CVE-2026-17646 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain…
Description
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Financial Transaction Manager (FTM) for RedHat OpenShift 4.0 | 4.0.6.0 → latest | No fix stated |
Other CVEs of Financial Transaction Manager (FTM) for RedHat OpenShift
The 46 CVEs of Financial Transaction Manager (FTM) for RedHat OpenShift →
CVE-2026-19267
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business…
6.2
Medium
CVE-2026-19179
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database…
8.2
High
CVE-2026-19087
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege…
4.4
Medium
CVE-2026-18875
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated…
7.3
High