CVE-2022-43575
- EPSS 0.07%
- Published 30.05.2024 12:15:09
- Last modified 08.01.2025 17:22:30
IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure ...
CVE-2022-43842
- EPSS 0.03%
- Published 23.02.2024 19:15:08
- Last modified 31.12.2024 15:32:22
IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...
CVE-2021-38927
- EPSS 0.07%
- Published 25.12.2023 03:15:07
- Last modified 21.11.2024 06:18:13
IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted s...