critical9.9
CVE-2023-27874
IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.
Impact
IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Faspex | through 4.4.2 Version 4.4.2 |