MEDIUM🇬🇧 English

CVE-2022-43840

CVSS 4.3v3.1pub. 2025-04-14upd. 2025-07-24

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

IBM Aspera Console
APP
Ibm
3.4.0 – 3.4.4

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

CWE-643

Referencje

www.ibm.com/support/pages/node/7169766…

Powiązane podatności

CVE-2025-13379HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38963HIGH8.0ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code o...

CVE-2022-43842HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38927HIGH7.2ten sam produkt

IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...

CVE-2025-13212MEDIUM5.3ten sam produkt

IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the e...