AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-93030

IBM Financial Transaction Manager for Redhat OpenShift: information disclosure

IBM

CVE-2026-93030 · Published Sep 25, 2026

Medium6.5
No fix yet
IBM advisory

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

Affected versions

PackageAffectedFixed in
IBM Financial Transaction Manager (FTM) for Redhat OpenShift
Product
>= 4.0.6.0, <= 4.0.10.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-611

More IBM advisories

All IBM
High 7.2Sep 25IBM Guardium Data Protection: unsafe deserializationCVE-2026-84862no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: path traversalCVE-2026-84882no fix yetHigh 7.1Sep 25IBM Server Firmware: memory corruptionCVE-2026-93306no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: information disclosureCVE-2026-85029no fix yetHigh 8.8Sep 25IBM Guardium Data Protection: command injectionCVE-2026-85542no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: plaintext password storageCVE-2026-84884no fix yet