CVE-2021-39066: IBM Financial Transaction Manager

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

Affected products

• IBM Financial Transaction Manager: version 3.2.4 only

Published 2022-02-02. Last modified 2026-06-17.