CVE-2019-4032: IBM Financial Transaction Manager

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998.

Affected products

• IBM Financial Transaction Manager: from 3.1.0.0, up to and including 3.1.0.3

Published 2019-03-05. Last modified 2026-06-17.