Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:transformation_extender_advanced:10.0.1:*:*:*:*:*:*:*

part: a version: 10.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTransformation Extender Advanced (0ac34a3c-4987-5239-9d9f-4bb8b2f9cbdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50301 vulnerable 2026-06-08 06:16:15.903214 IBM Transformation Extender Advanced information disclosure
LOW (1.9)
IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.
Published: 2025-10-01T15:15:05.897Z
Updated: 2025-10-15T16:09:37.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50300 vulnerable 2026-06-08 06:16:15.902957 IBM Transformation Extender Advanced improper access control
MEDIUM (5.1)
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.
Published: 2025-10-01T17:07:03.199Z
Updated: 2025-10-01T17:20:10.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49886 vulnerable 2026-06-08 06:16:10.684307 IBM Transformation Extender Advanced code execution
CRITICAL (9.8)
IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Published: 2025-10-06T14:47:55.517Z
Updated: 2026-02-26T17:48:16.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49883 vulnerable 2026-06-08 06:16:10.682775 IBM Transformation Extender Advanced information disclosure
MEDIUM (5.9)
IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Published: 2025-10-01T17:07:58.236Z
Updated: 2025-10-01T17:19:51.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49881 vulnerable 2026-06-08 06:16:10.682416 IBM Transformation Extender Advanced session fixation
MEDIUM (6.3)
IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-10-01T17:05:40.491Z
Updated: 2025-10-01T17:20:31.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.