Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:aspera_console:3.4.2:-:*:*:*:*:*:*

part: a version: 3.4.2 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAspera Console (46593f94-d19b-5f25-aed9-93f3ad1e039b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43842 vulnerable 2026-06-08 05:49:34.861888 IBM Aspera Console SQL injection
HIGH (8.6)
IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 239079.
Published: 2024-02-23T18:47:13.874Z
Updated: 2024-08-03T13:40:06.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38927 vulnerable 2026-06-08 05:33:48.573954 IBM Aspera Console cross-site scripting
HIGH (7.2)
IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210322.
Published: 2023-12-25T02:20:43.600Z
Updated: 2024-08-04T01:51:20.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.