CVE-2026-93030

Summary

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

Affected Software

VendorProductVersion RangeStatus
IBMIBM Financial Transaction Manager (FTM) for Redhat OpenShift4.0.6.0 <= 4.0.10.0affected

Weaknesses

  • CWE-611: CWE-611 Improper restriction of XML external entity reference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References