PT-2025-40899
CVE-2023-49886
·
Published
2025-10-06
·
Updated
2025-10-16
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Standards Processing Engine version 10.0.1.10
Description
The software contains a flaw due to unsafe Java deserialization, which could allow a remote attacker to execute arbitrary code on the system. Exploitation involves sending specially crafted input. No information is available regarding the number of potentially affected devices or real-world incidents. The vulnerability involves unsafe Java deserialization.
Recommendations
Update to a newer version to address this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾