What’s Vulnerable › Vulnerabilities

CVE-2022-43872: IBM Financial Transaction Manager information disclosure

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-20 · updated 2026-06-17
• Weakness: CWE-863

Description

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Affected products

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift: 3.2.4

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
• https://www.ibm.com/support/pages/node/6848881
• https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
• https://www.ibm.com/support/pages/node/6848881

Get alerted when CVE-2022-43872 or the next vulnerability affects your stack