Threats affecting pkg:maven/com.ibm/financial-transaction-manager-ftmfor-redhat-openshift

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.8%	CVE-2026-18490IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Deserialization of Untrusted Data High8.8EPSS 0.8%2026-09-23CVE Database V5CVE-2026-18490 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint (BrmRMISSLServerSocketFactory.java:95, EP8). An adjacent-network attacker can deliver a crafted serialized payload to achieve arbitrary code execution, exposing all PayDir credentials and enabling manipulation of payment business rules. EPSS 0.8%Vulnerability CWE-502	CVE Database V5	2026-09-23

Page 1 of 1