Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-93030

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

Description

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM IBM Financial Transaction Manager (FTM) for Redhat OpenShift

Default version status: unaffected

  • 4.0.6.0 to ≤ 4.0.10.0affected

References