Vulnerability Details CVE-2026-18172
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.6%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2026-18172
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.10.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.7.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.8.0
-
cpe:2.3:a:ibm:financial_transaction_manager:4.0.9.0
-
cpe:2.3:a:redhat:openshift:-