EUVD-2026-85357
GHSA-w654-rhwv-5m6c
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Unauth network SQLi (AV:N/AC:L/PR:N/UI:N); I keep I:H/A:L from IBM but raise C:N→C:L since blind boolean SQLi generally permits incremental data extraction.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
4DescriptionCVE.org
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.
AnalysisAI
Unauthenticated remote attackers can manipulate SQL database queries in IBM Financial Transaction Manager (FTM) for Red Hat OpenShift, giving them a high-integrity impact with limited confidentiality and availability effects on affected payments-processing deployments. The flaw is a boolean-based blind SQL injection rooted in improper neutralization of special elements in a boolean expression (CWE-74), exploitable over the network with low complexity and no authentication or user interaction per the assessed CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L (base 8.2). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions per the CVSS vector - remote unauthenticated exploitation (PR:N/UI:N/AC:L) against a network-reachable IBM Financial Transaction Manager (FTM) for RedHat OpenShift instance. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | IBM's CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L, base 8.2) describes an unauthenticated, network-reachable, low-complexity boolean-based blind SQL injection with high integrity impact and low availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | IBM has published patch guidance for this issue in security note node/7288641 (https://www.ibm.com/support/pages/node/7288641); the advisory is listed as the vendor patch reference, so the primary remediation is to apply the IBM-supplied fix or upgrade to the FTM for Red Hat OpenShift release identified there and redeploy the affected OpenShift containers - note that no exact fix version is enumerated in the CVE metadata, so the version number must be taken from the IBM advisory rather than assumed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all deployments of IBM Financial Transaction Manager (FTM) for Red Hat OpenShift, determine the exact installed version and build, and cross-reference against IBM's vendor advisory to identify affected instances; if any are exposed, apply the patch available per vendor advisory immediately per IBM's guidance, and as a temporary measure restrict network access to the FTM management and payment interfaces using firewall rules or security groups. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to ex
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remot
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2,
The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive j
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used
A flaw was found in rsync which could be triggered when rsync compares file checksums. Rated high severity (CVSS 7.5), t
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which mig
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows
cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitr
Share
External POC / Exploit Code
Leaving vuln.today