What is the CVSS score of CVE-2023-49883?

CVE-2023-49883 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Transformation Extender Advanced are affected by CVE-2023-49883?

CVE-2023-49883 presents moderate security risk rated CVSS 5.9. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2023-49883?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Transformation Extender Advanced CVE-2023-49883

EUVD-2023-53783 MEDIUM

Weak Password Requirements (CWE-521)

2025-10-01 psirt@us.ibm.com

Information Disclosure IBM Transformation Extender Advanced

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 18:18 euvd

EUVD-2023-53783

Analysis Generated

Mar 13, 2026 - 18:18 vuln.today

CVE Published

Oct 01, 2025 - 17:15 nvd

MEDIUM 5.9

DescriptionCVE.org

IBM Transformation Extender Advanced 10.0.1

does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

AnalysisAI

CVE-2023-49883 is a security vulnerability (CVSS 5.9). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

More in Transformation Extender Advanced

View all

CVE-2023-49881 MEDIUM This Month

6.3 Oct 01

IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticate

CVE-2023-50300 MEDIUM This Month

5.1 Oct 01

IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper

CVE-2021-29883 MEDIUM This Month

4.3 Oct 21

IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on

Same weakness CWE-521 – Weak Password Requirements

View all

CVE-2012-2441 HIGH POC

8.5

CVE-2024-42850 CRITICAL POC

9.8

CVE-2025-28200 CRITICAL POC

9.8

CVE-2025-28389 CRITICAL POC

9.8

CVE-2025-63747 CRITICAL POC

9.8

CVE-2023-37756 CRITICAL POC

9.8

CVE-2023-2160 CRITICAL POC

9.8

CVE-2023-2106 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2023-49883 vulnerability details – vuln.today

Back

Transformation Extender Advanced CVE-2023-49883

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Transformation Extender Advanced

Same weakness CWE-521 – Weak Password Requirements

Same technique Information Disclosure

Share

External POC / Exploit Code