Medium severity · published Dec 20, 2022
CVE-2022-43872
IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g
5.3
CVSS
0.5%
EPSS
No
On KEV
Description
IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
Financial Transaction Manager · Ibm
3.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-43872
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-43872
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
Patch
https://www.ibm.com/support/pages/node/6848881
More from Financial Transaction Manager
9.9
CVE-2026-18169
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18163
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18162
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-17618
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2019-4575
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection