CVE-2026-17618 — IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Back Back to CVE browser

HIGH

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Published Sep 22, 2026

7.3

HIGH

CVSS 3.1

EPSS 0.22%

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.

Affected products

Vendor IBM Product Financial Transaction Manager (FTM) for RedHat OpenShift Default
n/a
- Version
  4.0.6.0
  Status
  affected
  Constraints
  <=4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Financial Transaction Manager (FTM) for RedHat OpenShift

n/a

Version	Status	Constraints
4.0.6.0	affected	<=4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064

Remediation

Vendor solution

IBM strongly recommends addressing the vulnerabilities now by updating FTM deployments to the following

Affected Product(s)Resolved by VRMFRemediation / First FixFinancial Transaction Manager (FTM) for RedHat OpenShift4.0.11.0 FTM 4.0.11.0 https://www.ibm.com/support/pages/node/7285661