Technology · IBM
IBM Financial Transaction Manager vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 45 vulnerabilities in IBM Financial Transaction Manager: 0 in the last 7 days and 45 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-93030, was published on 25 September 2026. Nothing in the last four weeks, down from 45 vulnerabilities in the four before. 0 critical against 6.
- Last 7 days
- 0
- Last 90 days
- 45
- Critical, all time
- 6
- Exploited in the wild
- 0
About IBM Financial Transaction Manager
IBM financial transaction processing system for managing payment and fund transfer operations.
Latest IBM Financial Transaction Manager vulnerabilities
- CVE-2026-93030: IBM Financial Transaction Manager XML external entity injectionmediumCVSS 6.5
- CVE-2026-19267: IBM Financial Transaction Manager missing authentication in Business Rules ManagermediumCVSS 6.2EPSS 0.1%
- CVE-2026-19179: IBM Financial Transaction Manager boolean-based SQL injectionhighCVSS 8.2EPSS 0.3%
- CVE-2026-19087: IBM Financial Transaction Manager privilege escalation in containermediumCVSS 4.4EPSS 0.1%
- CVE-2026-18875: IBM Financial Transaction Manager RAG poisoning via unauthenticated runbookhighCVSS 7.3EPSS 0.2%
- CVE-2026-18872: IBM Financial Transaction Manager stored cross-site scripting in UIcriticalCVSS 9.3EPSS 0.2%
- CVE-2026-18505: IBM Financial Transaction Manager open redirect in HostHeaderFiltermediumCVSS 5.4EPSS 0.1%
- CVE-2026-18490: IBM Financial Transaction Manager RCE via Java deserializationhighCVSS 8.8EPSS 0.3%
- CVE-2026-18185: IBM Financial Transaction Manager missing authentication for critical functionhighCVSS 7.3EPSS 0.3%
- CVE-2026-18184: IBM Financial Transaction Manager XXE injectionhighCVSS 7.4EPSS 0.2%
- CVE-2026-18181: IBM Financial Transaction Manager authentication bypass via hardcoded keyhighCVSS 8.1EPSS 0.3%
- CVE-2026-18180: IBM Financial Transaction Manager SQL injectionmediumCVSS 6.5EPSS 0.3%
- CVE-2026-18179: IBM Financial Transaction Manager missing authorization in chat sessionsmediumCVSS 6.5EPSS 0.2%
- CVE-2026-18177: IBM Financial Transaction Manager missing authorization in payment executionhighCVSS 7.1EPSS 0.2%
- CVE-2026-18176: IBM Financial Transaction Manager cleartext transmission of sensitive informationhighCVSS 7.4EPSS 0.1%
- CVE-2026-18172: IBM Financial Transaction Manager XXE information disclosurehighCVSS 7.4EPSS 0.2%
- CVE-2026-18170: IBM Financial Transaction Manager resource exhaustion denial of servicemediumCVSS 6.5EPSS 0.2%
- CVE-2026-18169: IBM Financial Transaction Manager symbolic link validation bypasscriticalCVSS 9.9EPSS 0.5%
- CVE-2026-18163: IBM Financial Transaction Manager arbitrary code execution via deserializationcriticalCVSS 9.8EPSS 0.5%
- CVE-2026-18162: IBM Financial Transaction Manager remote code execution in Function constructorcriticalCVSS 9.8EPSS 0.5%
- CVE-2026-18161: IBM Financial Transaction Manager audit log falsification via HTTP header validationmediumCVSS 4.3EPSS 0.2%
- CVE-2026-18156: IBM Financial Transaction Manager authorization bypass via identity forgerymediumCVSS 6.5EPSS 0.2%
- CVE-2026-18154: IBM Financial Transaction Manager weak cryptographic keyhighCVSS 8EPSS 0.2%
- CVE-2026-18153: IBM Financial Transaction Manager hardcoded cryptographic keysmediumCVSS 5.4EPSS 0.1%
- CVE-2026-18152: IBM Financial Transaction Manager cryptographic signature verification bypasshighCVSS 7.4EPSS 0.1%
Most severe IBM Financial Transaction Manager vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-18169: IBM Financial Transaction Manager symbolic link validation bypasscriticalCVSS 9.9EPSS 0.5%
- CVE-2026-18163: IBM Financial Transaction Manager arbitrary code execution via deserializationcriticalCVSS 9.8EPSS 0.5%
- CVE-2026-18162: IBM Financial Transaction Manager remote code execution in Function constructorcriticalCVSS 9.8EPSS 0.5%
- CVE-2026-18872: IBM Financial Transaction Manager stored cross-site scripting in UIcriticalCVSS 9.3EPSS 0.2%
- CVE-2026-17645: IBM Financial Transaction Manager privilege escalationcriticalCVSS 9.1EPSS 0.4%
- CVE-2026-17635: IBM Financial Transaction Manager improper HTTP security constraintscriticalCVSS 9.1EPSS 0.4%
- CVE-2026-17636: IBM Financial Transaction Manager remote code execution via improper validationhighCVSS 8.8EPSS 0.5%
- CVE-2026-18490: IBM Financial Transaction Manager RCE via Java deserializationhighCVSS 8.8EPSS 0.3%
- CVE-2026-17647: IBM Financial Transaction Manager command execution from untrusted controlhighCVSS 8.8EPSS 0.2%
- CVE-2026-17644: IBM Financial Transaction Manager hard-coded credentials local escalationhighCVSS 8.8EPSS 0.1%
Vulnerabilities per week
Nothing in the last four weeks, down from 45 vulnerabilities in the four before. 0 critical against 6. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 45 | 6 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many IBM Financial Transaction Manager vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/financial-transaction-manager)<a href="https://junglewise.ai/threats/technologies/financial-transaction-manager"><img src="https://junglewise.ai/threats/technologies/financial-transaction-manager/badge.svg" alt="IBM Financial Transaction Manager vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/financial-transaction-manager.json, and this page as text at https://junglewise.ai/threats/technologies/financial-transaction-manager.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "IBM Financial Transaction Manager vulnerabilities", https://junglewise.ai/threats/technologies/financial-transaction-manager, 9 November 2026.