CVE-2023-27874

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845...

CVE-2023-27874

CVE-2023-27874 affects IBM Aspera Faspex 4.4.2. The vulnerability is an XML External Entity (XXE) injection when processing XML data, enabling a remote authenticated attacker to execute arbitrary commands. IBM X-Force lists the impact as high to critical, with a base score up to 9.9 (CRITICAL in ...