MEDIUM🇵🇱 Wersja polska

CVE-2022-43841

CVSS 4.0v3.1pub. 2024-05-30upd. 2025-01-08

IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • IBM Aspera Console

    APP
    Ibm
    3.4.23.4.0 – 3.4.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-13379HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38963HIGH8.0ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code o...

CVE-2022-43842HIGH8.6ten sam produkt

IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially ...

CVE-2021-38927HIGH7.2ten sam produkt

IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...

CVE-2025-13212MEDIUM5.3ten sam produkt

IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the e...