CVE-2023-27874 — IBM Aspera Faspex XML external entity injection

CVE-2023-27874

IBM Aspera Faspex XML external entity injection PUBLISHED

Description (CNA)

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Faspex	affected 4.4.2

CWE

CWE-611

References

https://www.ibm.com/support/pages/node/6964694
https://exchange.xforce.ibmcloud.com/vulnerabilities/249845

ADP enrichment

CVE

No English description supplied.

https://www.ibm.com/support/pages/node/6964694
https://exchange.xforce.ibmcloud.com/vulnerabilities/249845

CISA-ADP

No English description supplied.

No references supplied.