Transformation Advisor

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-36193 HIGH This Week

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

IBM Privilege Escalation Transformation Advisor

NVD

CVSS 3.1

8.4

EPSS

0.0%

CVE-2022-41299 MEDIUM This Month

IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM XSS Transformation Advisor

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2025-36193

EPSS 0% CVSS 8.4

HIGH This Week

IBM Privilege Escalation Transformation Advisor

NVD

CVE-2022-41299

EPSS 0% CVSS 5.4

MEDIUM This Month

IBM XSS Transformation Advisor

NVD