Ibm · Ibm Aspera Web Application · CVE-2020-4731
**Name of the Vulnerable Software and Affected Versions**
IBM Aspera Web Application version 1.9.14 PL1
**Description**
The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.
**Recommendations**
For IBM Aspera Web Application version 1.9.14 PL1, update to a version that addresses this issue to prevent cross-site scripting attacks.