Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (46 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-18185 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.3 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function.
CVE-2026-18177 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.1 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks.
CVE-2026-18161 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 4.3 Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
CVE-2026-18875 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.3 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.
CVE-2026-18872 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 9.3 Critical
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authenticated operator browsers, enabling session hijacking and unauthorized operator-level payment actions.
CVE-2026-18184 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.4 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVE-2026-18181 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 8.1 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.
CVE-2026-18179 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 6.5 Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization.
CVE-2026-18172 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.4 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
CVE-2026-18170 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 6.5 Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.
CVE-2026-18156 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 6.5 Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.
CVE-2026-18137 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 8.1 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.
CVE-2026-18134 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.5 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
CVE-2026-18124 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 6.5 Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-18123 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.6 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.
CVE-2026-18066 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.9 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.
CVE-2026-17647 1 Ibm 1 Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 8.8 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.
CVE-2026-17643 1 Ibm 2 Financial Transaction Manager (ftm) for Redhat Openshift, Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 8.8 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.
CVE-2026-17637 1 Ibm 2 Financial Transaction Manager (ftm) for Redhat Openshift, Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 8.8 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
CVE-2026-17618 1 Ibm 2 Financial Transaction Manager (ftm) for Redhat Openshift, Financial Transaction Manager Ftmfor Redhat Openshift 2026-09-23 7.3 High
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.