Transformation Extender Advanced (Ibm) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-10-06. Vendor: Ibm.

CVEs of Transformation Extender Advanced

• CVE-2023-49886 - CVSS 9.8 (critical), 2025-10-06: IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By…
• CVE-2023-49883 - CVSS 7.5 (high), 2025-10-01: IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to…
• CVE-2023-49881 - CVSS 8.8 (high), 2025-10-01: IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on…
• CVE-2023-50300 - CVSS 6.2 (medium), 2025-10-01: IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.
• CVE-2023-50301 - CVSS 4.4 (medium), 2025-10-01: IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.
• CVE-2021-29883 - CVSS 4.3 (medium), 2021-10-21: IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization tokens or session…
• CVE-2017-1758 - CVSS 7.1 (high), 2018-02-21: IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4,…