CVE-2022-43872: IBM Financial Transaction Manager

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Affected products

• IBM Financial Transaction Manager: version 3.2.4 only

Published 2022-12-20. Last modified 2026-06-17.