Ibm vulnerabilities
Published CVEs affecting Ibm products: 1580 record(s), with severity, exploitation and fixes.
I 162Aix 159Vios 156PowerVM VIOS 145Langflow OSS 142Guardium Data Protection 90Websphere Application Server 89Db2 69Security Verify Access 62Verify Identity Access 62Verify Identity Access Container 59Security Verify Access Container 58Datastage On Cloud Pak For Data 57Concert 53WebSphere Application Server - Liberty 47Financial Transaction Manager (FTM) for RedHat OpenShift 47Financial Transaction Manager 46DataPower Gateway 10.6.0 43Datapower Gateway 43DataPower Gateway 10.5.0 42DataPower Gateway 11.0.0 41DataPower Gateway 10.6CD 41Power System E1180 (9080-heu) Firmware 36Power System E1080 (9080-hex) Firmware 35Power System S1014 (9105-41b) Firmware 32Power System S1022s (9105-22b) Firmware 32Power System L1022 (9786-22h) Firmware 32Power System L1024 (9786-42h) Firmware 32Power System S1012 (9028-21b) Firmware 32Power System S1124 (9824-42a) Firmware 32Power System S1024 (9105-42a) Firmware 32Power System S1022 (9105-22a) Firmware 32Power System L1124 (9856-42h) Firmware 32Power System E1050 (9043-mrx) Firmware 32Power System S1122 (9824-22a) Firmware 32Power System S1122s (9824-22b) Firmware 32Power System S1114 (9824-41b) Firmware 32Power System L1122 (9856-22h) Firmware 32Power System E1150 (9043-mru) Firmware 32Power System H924 (9223-42s) Firmware 28
CVE-2026-18161
Medium · 4.3
CWE-778 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
CVE-2026-18156
Medium · 6.5
CWE-862 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.
CVE-2026-18154
High · 7.5
CWE-321 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.
CVE-2026-18153
High · 7.1
CWE-327 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors.
CVE-2026-18152
High · 7.5
CWE-347 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
CVE-2026-18137
High · 8.1
CWE-89 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.
CVE-2026-18134
High · 7.5
CWE-319 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
CVE-2026-18133
Medium · 6.5
CWE-22 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.
CVE-2026-18132
Medium · 6.5
CWE-862 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.
CVE-2026-18131
Medium · 6.1
CWE-79 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.
CVE-2026-18124
Medium · 6.5
CWE-522 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-18123
High · 7.5
CWE-470 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.
CVE-2026-18114
High · 7.5
CWE-22 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.
CVE-2026-18095
High · 8.8
CWE-787 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-18074
High · 7.5
CWE-287 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.
CVE-2026-18066
High · 7.1
CWE-918 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.
CVE-2026-17647
High · 8.8
CWE-829 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.
CVE-2026-17646
Medium · 6.5
CWE-611 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
CVE-2026-17645
High · 8.8
CWE-269 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.
CVE-2026-17644
High · 7.1
CWE-798 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.
CVE-2026-17643
High · 7.1
CWE-522 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.
CVE-2026-17637
High · 8.8
CWE-502 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
CVE-2026-17636
High · 8.8
CWE-787 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
CVE-2026-17635
Critical · 9.1
CWE-306 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.
CVE-2026-17472
Critical · 9.6
CWE-269 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.