IBM Financial Transaction Manager UI Stored XSS Vulnerability

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42).

A malicious actor can inject script into stored network acknowledgement data. The script executes in authenticated operator browsers.

• Session hijacking
• Unauthorized operator-level payment transactions