CVE-2023-49886

CRITICAL

IBM Transformation Extender Advanced - Remote Code Execution via Unsafe Java Deserialization

Title source: llm

Description

IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7247179

Scores

CVSS v3 9.8

EPSS 0.0180

EPSS Percentile 83.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-502

Status published

Products (1)

ibm/transformation_extender_advanced 10.0.1

Published Oct 06, 2025

Tracked Since Feb 18, 2026