CVE-2022-43840

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document...

CVE-2022-43840

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document...

CVE-2022-43840

creationtimestamp| type| source ---|---|--- 2025-04-14 20:54:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11699 2025-04-14 22:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvtzoj62i 2025-04-15 01:32:48+00:00| seen| https://t.me/cvedetector/22894...

CVE-2022-43840

CVE-2022-43840 affects IBM Aspera Console 3.4.0–3.4.4. The vulnerability is an XPath injection in the Web UI that could allow an authenticated attacker to exfiltrate sensitive application data and/or deduce the XML document structure. IBM’s bulletin confirms remediation by upgrading to IBM Aspera...