Remote JavaScript Execution Vulnerability in IBM Financial Transaction Manager on RedHat OpenShift
CVE-2026-18131

8.2HIGH

Key Information:

Vendor

IBM
Status
Financial Transaction Manager (ftm) for Red Hat Openshift
Vendor
CVE Published:
22 September 2026

What is CVE-2026-18131?

A remote security vulnerability in IBM Financial Transaction Manager for RedHat OpenShift could permit an attacker to execute arbitrary JavaScript in the context of an authenticated user's browser session. This issue arises from inadequate handling of HTML input, which creates potential entry points for cross-site scripting (XSS) attacks. Organizations utilizing this software should be vigilant and apply necessary updates and patches to mitigate associated risks.

Affected Version(s)

Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 <= 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064

References

https://www.ibm.com/support/pages/node/7288641
vendor-advisorypatch

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.