Vulnerability Details CVE-2026-17646
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 20.1%
CVSS Severity
CVSS v3 Score 8.5
Products affected by CVE-2026-17646
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.10.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.7.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.8.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.9.0
-
cpe:2.3:a:redhat:openshift:-