Security Bulletin: IBM Transformation Extender Advanced is affected by Angular dependencies

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to multiple Angular.js issues. Please upgrade to a patched version. Vulnerability Details CVEID:CVE-2019-14863 DESCRIPTION: There is a vulnerability in all angular versions before...

Security Bulletin: due to the use of 10x UI, IBM Transformation Extender Advanced is vulnerable to unsafe deserialization in Java

Summary IBM Transformation Extender Advanced also known as IBM Standards Processing Engine has a vulnerability that could allow attackers to perform remote code execution. Please upgrade to one of the fixed versions in this bulletin. Vulnerability Details CVEID:CVE-2022-42441 DESCRIPTION: IBM...

CVE-2023-50301 IBM Transformation Extender Advanced information disclosure

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...

CVE-2023-50301 IBM Transformation Extender Advanced information disclosure

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...

CVE-2023-50301

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user, exposing data via log disclosure. The vulnerability is rooted in log file handling of sensitive information. IBM lists affected version 10.0.1 and provides remedia...

Security Bulletin: due to the use of Apache Commons IO, IBM Transformation Extender Advanced is vulnerable to excessive CPU consumption

Summary Apache Commons IO is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of .... CVE-2024-47554 Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The...

PT-2025-40277

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software contains improper access controls, potentially allowing a local user to perform unauthorized actions. Recommendations At the moment, there is no information about a...

PT-2025-40276

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software does not enforce strong passwords by default, potentially simplifying account compromise by attackers. Recommendations Ensure users are required to use strong passwor...

PT-2025-40275

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software does not invalidate the session after a user logs out. This could allow an authenticated user to impersonate another user on the system. Recommendations At the moment...

IBM Transformation Extender Advanced 代码问题漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A code issue vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from a failure to disable a session after loggi...

PT-2025-40247

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description IBM Transformation Extender Advanced version 10.0.1 stores potentially sensitive information in log files. A local user could read this information. Recommendations At the moment,...

CVE-2023-50301: Insertion of Sensitive Information into Log File

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...

CVE-2023-50300: Improper Access Control

IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...

CVE-2023-49883: Weak Password Requirements

IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2023-49881: Insufficient Session Expiration

IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

IBM Transformation Extender Advanced 安全漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A security vulnerability exists in IBM Transformation Extender Advanced version 10.0.1, which stems from not requiring users to use strong password...

IBM Transformation Extender Advanced 访问控制错误漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. An access control error vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from improper access control and cou...

IBM Transformation Extender Advanced 日志信息泄露漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...

CVE-2025-9481

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function setIpv6 of the file /goform/setIpv6. The manipulation of the argument tunrdPrefix leads to stack-based buffer...

Linksys多款产品 安全漏洞

Linksys RE6250 and others are a wireless extender from Linksys USA. A security vulnerability exists in various Linksys products, which stems from incorrect manipulation of the parameter dir/sFromPort/sToPort/dFromPort/dToPort/protocol/layer7/dscp/remarkdscp in the /goform/qosClassifier file...