Skip to content
Sign in
6.4 Medium

CVE-2021-38870 IBM Aspera Cloud is vulnerable to stored cross-site scripting

Description

IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343.

Affected products and versions

Product Affected versions Fixed in
Aspera Versions not published

Other CVEs of Aspera

The 3 CVEs of Aspera →
CVE-2023-27286 IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds… 8.4 High CVE-2023-27284 IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds… 8.4 High
Track this CVE