9.8

CVE-2023-49886

EPSS 1.8%
Veröffentlicht 06.10.2025 14:47:55
Zuletzt bearbeitet 16.10.2025 18:13:37
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Transformation Extender Advanced code execution

IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Transformation Extender Advanced Version10.0.1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.8%	0.83

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://www.ibm.com/support/pages/node/7247179

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-49886

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-49886

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-49886

EUVD