FT
Product
Financial Transaction Manager
92
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 37Medium 36Low 4
Watch
Add Financial Transaction Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18156 | 6.5 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-18133 | 6.5 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-18132 | 6.5 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-18124 | 6.5 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-17646 | 6.5 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2018-1391 | 6.5 | Feb 22 | IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a… Affected: 3.0.4.0; 3.1.0.0 |
| CVE-2017-1538 | 6.5 | Oct 10 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL Affected: 3.0.2.0; 3.0.2.1; 3.0.2.0; 3.0.2.1; 3.0.2.0; 3.0.2.1 |
| CVE-2016-0276 | 6.3 | Mar 9 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for… Affected: 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12 |
| CVE-2026-19267 | 6.2 | Sep 23 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-18131 | 6.1 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2020-4560 | 6.1 | Aug 3 | IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting Affected: 3.2.4.0 |
| CVE-2016-3060 | 5.7 | Oct 29 | Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 3.0.0.3; 3.0.0.4; 3.0.0.5; +34 more |
| CVE-2022-43875 | 5.5 | Dec 20 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of… Affected: 3.2.4 |
| CVE-2026-18505 | 5.4 | Sep 23 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2021-29841 | 5.4 | Sep 14 | IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting Affected: 3.2.4 |
| CVE-2020-5000 | 5.4 | Jun 15 | IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting Affected: 3.0.2; 3.2.4 |
| CVE-2020-4555 | 5.4 | Dec 21 | IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system Affected: 2.1.1.0; 3.0.0; 3.0.2; 3.0.2; 3.0.5; 3.0.6; +7 more |
| CVE-2018-1871 | 5.4 | Dec 6 | IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting Affected: 3.0.0.0; 3.0.2.0; 3.0.5.0; 3.0.5.1 |
| CVE-2018-1390 | 5.4 | Mar 30 | IBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1 is vulnerable to cross-site scripting Affected: 3.0.0.0; 3.0.2.0; 3.0.2.1; 3.0.5.0 |
| CVE-2016-0274 | 5.4 | Mar 9 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for… Affected: 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 2.1.1.2; 2.1.1.2; 2.1.1.2 |
| CVE-2016-0253 | 5.4 | Mar 9 | Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction… Affected: 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 2.1.1.2; 2.1.1.2; 2.1.1.2 |
| CVE-2017-1160 | 5.4 | Apr 17 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 3.0.0.3; 3.0.0.4; 3.0.0.5; +34 more |
| CVE-2016-5920 | 5.4 | Oct 29 | Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 3.0.0.3; 3.0.0.4; 3.0.0.5; +34 more |
| CVE-2022-43872 | 5.3 | Dec 20 | IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g Affected: 3.2.4 |
| CVE-2026-19087 | 4.4 | Sep 23 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2026-18161 | 4.3 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2018-2026 | 4.3 | Jan 23 | IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files Affected: 3.2.1 |
| CVE-2018-1670 | 4.3 | Oct 4 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files Affected: 3.0.2.0; 3.0.2.0; 3.0.2.1; 3.0.2.1 |
| CVE-2018-1393 | 4.3 | Jun 13 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive… Affected: 3.0.6.0 |
| CVE-2016-0268 | 4.3 | Mar 9 | XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction… Affected: 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 2.1.1.2; 2.1.1.2; 2.1.1.2 |
| CVE-2017-1152 | 4.3 | Apr 14 | IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against… Affected: 3.0.1.0; 3.0.1.0; 3.0.2.0; 3.0.2.0 |
| CVE-2016-0232 | 4.3 | Feb 15 | IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 3.0.0.3; 3.0.0.4; 3.0.0.5; +30 more |
| CVE-2016-0231 | 4.3 | Feb 15 | IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain… Affected: 3.0.0.0 |
| CVE-2026-18173 | 3.7 | Sep 22 | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities Affected: 4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more |
| CVE-2020-4556 | 3.3 | Mar 15 | IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the… Affected: 3.2.0 before 3.2.11 |
| CVE-2016-0275 | 3.3 | Mar 9 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for… Affected: 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 3.0.0.0 through 3.0.0.12; 2.1.1.2; 2.1.1.2; 2.1.1.2 |
| CVE-2018-1392 | 3.1 | Feb 22 | IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain… Affected: 3.0.4.0; 3.1.0.0 |
| CVE-2014-8917 | – | Jan 28 | Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3)… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.1.0.0; 2.1.0.1; +4 more |
| CVE-2014-0833 | – | Feb 1 | The OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2 |
| CVE-2014-0832 | – | Feb 1 | Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allow… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2 |
| CVE-2014-0831 | – | Feb 1 | Cross-site request forgery (CSRF) vulnerability in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allows remote attackers to hijack the… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2 |
| CVE-2014-0830 | – | Feb 1 | Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.1.0.0 |