CVE-2017-1606: IBM Financial Transaction Manager

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926.

Affected products

• IBM Financial Transaction Manager: version 3.0.0.0 only; version 3.0.0.1 only; version 3.0.0.2 only; version 3.0.0.3 only; version 3.0.0.4 only; version 3.0.0.5 only; …

Published 2017-12-11. Last modified 2026-06-17.