Security Advisory

CVE-2023-27874

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-21 14:33:20

Last updated 2025-02-26 16:50:16

Assigner ibm

State PUBLISHED

Description

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.

← Browse all CVEs View on cve.org ↗