CVE-2021-38963: IBM Aspera Console

High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Affected products

• IBM Aspera Console: from 3.4.0, before 3.4.5 (fixed in 3.4.5)

Published 2024-09-25. Last modified 2026-06-17.