9 matches found
EUVD-2021-25307
Malware in sbrugna...
IBM Aspera Cross-Site Scripting Vulnerability
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from IBM U.S. A cross-site scripting vulnerability exists in IBM Aspera Cloud, which could be exploited by an attacker to embed arbitrary JavaScript code in the Web UI to alter the intended...
CVE-2021-38870
IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343...
CVE-2021-38870
IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343...
CVE-2021-38870
CVE-2021-38870 affects IBM Aspera Cloud (Aspera on Cloud) with a stored cross-site scripting vulnerability in the Web UI that could lead to credential disclosure within a trusted session. The IBM advisory confirms the issue and states a fix was deployed in the SaaS environment; affected product i...
IBM Aspera cross-site scripting vulnerability
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from IBM U.S. A cross-site scripting vulnerability exists in IBM Aspera Cloud, which could be exploited by an attacker to embed arbitrary JavaScript code in the Web UI to alter the intended...
PT-2021-22301
Name of the Vulnerable Software and Affected Versions IBM Aspera Cloud affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted sessio...
CVE-2021-38870: Improper Neutralization of Input During Web Page Generation
IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343...
CVE-2021-38870
IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343...