Securetransport
Approved changes feed: RSS · Atom
cpe:2.3:a:axway:securetransport:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Axway (2edc389e-a742-5c12-87bb-8a9881e7ac2b) |
|---|---|
| Product | Securetransport (94b88b4a-fe3c-5a18-99b4-99b816243834) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9177 |
vulnerable | 2026-09-16 04:33:02.247695 |
Server-Side Template Injection in SecureTransport's Apache Velocity mail templates
A Server-Side Template Injection (SSTI) vulnerability was identified
in the mail template functionality of the Axway SecureTransport product in version 5.5-20260326. This
flaw
allows an attacker with admin privileges to inject arbitrary Java code expressions, which are
executed server-side when the template is rendered (i.e., during email
sending). Successful exploitation of this flaw allows an attacker to
execute
arbitrary code on the server that results in full host compromise.
This issue affects all Axway SecureTransport versions prior 5.5-20260528 update.
Published: 2026-07-29T13:46:06.383Z
Updated: 2026-07-31T05:52:15.529Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.