CVE-2022-43872

5.3 mediumEPSS 0.5%

Medium (5.3) in ibm financial transaction manager. EPSS 0.5% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2022-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:financial_transaction_manager

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
https://www.ibm.com/support/pages/node/6848881
https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
https://www.ibm.com/support/pages/node/6848881

Check your stack JSON