Known vulnerabilities in IBM Transformation Extender Advanced

Vendor: IBM Corporation
Software: IBM Transformation Extender Advanced
Software CPE: cpe:2.3:a:ibm_corporation:ibm_transformation_extender_advanced:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Transformation Extender Advanced IBM Transformation Extender Advanced is affected by 34 known vulnerabilities: 4 high, 23 medium, 7 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135090 - Improper Privilege Management
CVE-2026-3621		 CWE-269 Medium
No
No
 10.0.2.2 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 13 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 10.0.2.2 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 11 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 10.0.1.11 1iFix, 10.0.2.1 1iFix 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 - 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 10.0.1.11 1iFix, 10.0.2.1 1iFix 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 10.0.1.11 1iFix, 10.0.2.1 1iFix 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 10.0.1.11 1iFix, 10.0.2.1 1iFix 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 10.0.1.11 1iFix, 10.0.2.1 1iFix 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 10.0.1.12, 10.0.2.1 1iFix 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 10.0.1.11, 10.0.2.1 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 10.0.1.10, 10.0.2.1 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 10.0.1.11, 10.0.2.1 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 10.0.1.11, 10.0.2.0 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 10.0.1.11, 10.0.2.0 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more
#VU23383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14863		 CWE-79 Medium
No
No
 10.0.1.11, 10.0.2.0 04.12.2019 SB2019022306
SB2022090718
SB2023060626
and 6 more
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768		 CWE-79 Medium
No
No
 10.0.1.11, 10.0.2.0 04.12.2019 SB2019120407
SB2022090718
SB2022120810
and 11 more


Showing elements 1 - 20 out of 34