What is the CVSS score of CVE-2023-49881?

CVE-2023-49881 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Transformation Extender Advanced are affected by CVE-2023-49881?

CVE-2023-49881 presents moderate security risk rated CVSS 6.3. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2023-49881?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Transformation Extender Advanced CVE-2023-49881

EUVD-2023-53781 MEDIUM

Insufficient Session Expiration (CWE-613)

2025-10-01 psirt@us.ibm.com

Information Disclosure IBM Transformation Extender Advanced

6.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 18:18 euvd

EUVD-2023-53781

Analysis Generated

Mar 13, 2026 - 18:18 vuln.today

CVE Published

Oct 01, 2025 - 17:15 nvd

MEDIUM 6.3

DescriptionCVE.org

IBM Transformation Extender Advanced 10.0.1

does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

Analysis

IBM Transformation Extender Advanced 10.0.1

does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

Technical ContextAI

This vulnerability is classified as Insufficient Session Expiration (CWE-613).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in Transformation Extender Advanced

View all

CVE-2023-49883 MEDIUM This Month

5.9 Oct 01

CVE-2023-49883 is a security vulnerability (CVSS 5.9). Remediation should follow standard vulnerability management proce

CVE-2023-50300 MEDIUM This Month

5.1 Oct 01

IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper

CVE-2021-29883 MEDIUM This Month

4.3 Oct 21

IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on

Same weakness CWE-613 – Insufficient Session Expiration

View all

CVE-2022-36179 CRITICAL POC

9.8

CVE-2026-26342 CRITICAL POC

9.8

CVE-2016-5069 CRITICAL POC

9.8

CVE-2024-29401 CRITICAL POC

9.8

CVE-2023-49091 CRITICAL POC

9.8

CVE-2023-5865 CRITICAL POC

9.8

CVE-2023-5838 CRITICAL POC

9.8

CVE-2023-1854 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2023-49881 vulnerability details – vuln.today

Back

Transformation Extender Advanced CVE-2023-49881

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Transformation Extender Advanced

Same weakness CWE-613 – Insufficient Session Expiration

Same technique Information Disclosure

Share

External POC / Exploit Code