EUVD-2021-25307

Malware in sbrugna...

IBM Aspera Cross-Site Scripting Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from IBM U.S. A cross-site scripting vulnerability exists in IBM Aspera Cloud, which could be exploited by an attacker to embed arbitrary JavaScript code in the Web UI to alter the intended...

CVE-2021-38870

CVE-2021-38870 affects IBM Aspera Cloud (Aspera on Cloud) with a stored cross-site scripting vulnerability in the Web UI that could lead to credential disclosure within a trusted session. The IBM advisory confirms the issue and states a fix was deployed in the SaaS environment; affected product i...

CVE-2021-38870: Improper Neutralization of Input During Web Page Generation

IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343...

PT-2021-22301

Name of the Vulnerable Software and Affected Versions IBM Aspera Cloud affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted sessio...