CVE-2026-18872
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
CVSS Score
9.3
EPSS Score
0.0%
EPSS Percentile
0th
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authenticated operator browsers, enabling session hijacking and unauthorized operator-level payment actions.
| CWE | CWE-79 |
| Vendor | ibm |
| Product | financial transaction manager (ftm) for redhat openshift |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm financial transaction manager (ftm) for redhat openshift
Be the first to know when new critical vulnerabilities affecting ibm financial transaction manager (ftm) for redhat openshift are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
IBM / Financial Transaction Manager (FTM) for RedHat OpenShift
4.0.6.0 ≤ 4.0.10.0