Analysis and contextual insights are available on OpenCVE Cloud.
Vendor Solution
IBM strongly recommends addressing the vulnerabilities now by updating FTM deployments to the following Affected Product(s)Resolved by VRMFRemediation / First FixFinancial Transaction Manager (FTM) for RedHat OpenShift4.0.11.0 FTM 4.0.11.0 https://www.ibm.com/support/pages/node/7285661
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7288641 |
|
Wed, 23 Sep 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions. | |
| Title | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | |
| First Time appeared |
Ibm
Ibm financial Transaction Manager Ftmfor Redhat Openshift |
|
| Weaknesses | CWE-306 | |
| CPEs | cpe:2.3:a:ibm:financial_transaction_manager_ftmfor_redhat_openshift:4.0.6.0:*:*:*:*:*:*:* | |
| Vendors & Products |
Ibm
Ibm financial Transaction Manager Ftmfor Redhat Openshift |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-09-23T15:49:08.352Z
Reserved: 2026-08-07T14:12:41.283Z
Link: CVE-2026-19267
No data.
Status : Received
Published: 2026-09-23T16:16:42.237
Modified: 2026-09-23T16:16:42.237
Link: CVE-2026-19267
No data.
OpenCVE Enrichment
No data.