Lucene search
China National Vulnerability DatabaseCNVD-2023-11695HistoryFeb 21, 2023 - 12:00 a.m.
IBM Aspera Faspex Cross-Site Scripting Vulnerability
2023-02-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
20
ibm
aspera
faspex
cross-site scripting
vulnerability
version 4.4.1
javascript code
web ui
credential disclosure
trusted sessions
fasp protocol-based
file transfer
streaming solution
international business machines
EPSS
0.001
Percentile
20.2%
IBM Aspera is an IBM FASP protocol-based fast file transfer and streaming solution from International Business Machines (IBM). IBM Aspera Faspex version 4.4.1 contains a cross-site scripting vulnerability, which stems from a cross-site scripting vulnerability that could be exploited by an attacker to embed arbitrary JavaScript code in the Web UI which could lead to credential disclosure in trusted sessions.
Related
prion
prion
Cross site scripting
2023-02-17 17:15:00
cve
cve
CVE-2023-22868
2023-02-17 17:15:11
nvd
nvd
CVE-2023-22868
2023-02-17 17:15:11
cvelist
cvelist
CVE-2023-22868 IBM Aspera Faspex cross-site scripting
2023-02-17 16:01:36
ibm
ibm
nessus
nessus
IBM Aspera Faspex < 4.4.2 Patch Level 2 Multiple Vulnerabilities
2023-03-20 00:00:00