Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-27874

IBM Aspera Faspex XML external entity injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera Faspex

Default version status: unaffected

  • 4.4.2affected

References