Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-22402 EUVD-2022-27548GHSA-gg3r-rxp2-7j96

IBM Aspera Faspex cross-site scripting

Published Sep 8, 2023 · Updated Sep 25, 2024 · Assigned by ibm

Description

IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 222571.

Affected products

VendorProductAffectedFixed
IBM Aspera Faspex 5.0.5 —

References