CVE-2021-39066

8.8 highEPSS 0.6%

High (8.8) in ibm financial transaction manager. EPSS 0.6% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2022-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:financial_transaction_manager

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/215040
https://www.ibm.com/support/pages/node/6527892
https://exchange.xforce.ibmcloud.com/vulnerabilities/215040
https://www.ibm.com/support/pages/node/6527892

Check your stack JSON