CVE-2023-49886criticalCWE-502

CVE-2023-49886: critical vulnerability in IBM Transformation Extender Advanced

IBM Transformation Extender Advanced code execution

Published · Updated

Follow this CVE+ Monitor Transformation Extender Advanced

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.7%
IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · Transformation Extender Advanced
Related CVEs — IBM Transformation Extender Advanced

In the same product, most dangerous first.

CVE-2017-1758—CVE-2017-1758EPSS 1.6%CVE-2021-29883MEDIUMCVE-2021-29883EPSS 0.5%CVE-2023-49883MEDIUMIBM Transformation Extender Advanced information disclosureEPSS 0.3%CVE-2023-49881MEDIUMIBM Transformation Extender Advanced session fixationEPSS 0.2%CVE-2023-50301LOWIBM Transformation Extender Advanced information disclosureEPSS 0.1%CVE-2023-50300MEDIUMIBM Transformation Extender Advanced improper access controlEPSS 0.1%