Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-4731 EUVD-2020-25978GHSA-fw54-qvjj-883j

IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

Published Sep 21, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055.

Affected products

VendorProductAffectedFixed
IBM Aspera Shares 1.9.14.PL1 —

References