CVE-2022-43840: IBM Aspera Console

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

Affected products

• IBM Aspera Console: from 3.4.0, up to and including 3.4.4

Published 2025-04-14. Last modified 2026-06-17.