Aller au contenu
Se connecter
6.4 Moyenne

CVE-2021-38870 IBM Aspera Cloud is vulnerable to stored cross-site scripting

Description

IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343.

Produits et versions touchés

Produit Versions touchées Corrigé en
Aspera Versions non publiées

Autres CVE de Aspera

Les 3 CVE de Aspera →
CVE-2023-27286 IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds… 8.4 Élevée CVE-2023-27284 IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds… 8.4 Élevée
Suivre cette CVE