CVE-2021-38963: falha de alta gravidade em IBM Aspera Console
IBM Aspera Console CSV injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8epss 0.6%
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Aspera ConsoleCVEs relacionadas — IBM Aspera Console
No mesmo produto, das mais perigosas para as menos.
CVE-2022-43842HIGHIBM Aspera Console SQL injectionEPSS 0.5%CVE-2025-13459LOWIBM Aspera Console Denial of ServiceEPSS 0.4%CVE-2022-43845LOWIBM Aspera Console information disclosureEPSS 0.4%CVE-2025-13379HIGHA SQL Injection vulnerability has been addressed in IBM Aspera ConsoleEPSS 0.4%CVE-2021-38927HIGHIBM Aspera Console cross-site scriptingEPSS 0.3%CVE-2025-13925MEDIUMMultiple vulnerabilities in IBM Aspera ConsoleEPSS 0.3%