IBM Aspera Console
Moderate fix2 remedies
cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 3.4.0, <= 3.4.4
IBM Aspera Console XPath Injection Vulnerability Allowing Data Exfiltration
Vulnerability
Patched
A XPath injection vulnerability has been identified in IBM Aspera Console versions 3.4.0 to 3.4.4. This vulnerability allows authenticated attackers to exfiltrate sensitive application data or determine the structure of the XML document.
Impact
Exploitation of this vulnerability could lead to unauthorized exfiltration of sensitive application data or manipulation of the application's XML data structure.
Remediation
Users are advised to upgrade to IBM Aspera Console version 3.4.5, available for both Windows and Linux.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
2.5exploitability
4.9remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.