MEDIUM🇵🇱 Wersja polska

CVE-2022-43840

CVSS 4.3v3.1pub. 2025-04-14upd. 2025-07-24

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

  • IBM Aspera Console

    APP
    Ibm
    3.4.0 – 3.4.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-13379HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38963HIGH8.0ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code o...

CVE-2022-43842HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38927HIGH7.2ten sam produkt

IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...

CVE-2025-13212MEDIUM5.3ten sam produkt

IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the e...