Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-18872

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authenticated operator browsers, enabling session hijacking and unauthorized operator-level payment actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Financial Transaction Manager (FTM) for RedHat OpenShift

  • 4.0.6.0 to ≤ 4.0.10.0affected

References