CVE-2022-43840 — IBM Aspera Console XPath injection
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data a…
Published: 2025-04-14 · CVSS: 4.3 · CVSS 3.1
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7