CVE-2022-43840

Description

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

PUBLISHED Reserved 2022-10-26 | Published 2025-04-14 | Updated 2025-08-15 | Assigner ibm

Problem types

CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Product status

References

www.ibm.com/support/pages/node/7169766 vendor-advisory patch

cve.org (CVE-2022-43840)

nvd.nist.gov (CVE-2022-43840)

Download JSON