7.1
Élevée
CVE-2025-0162 IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when…
Description
IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aspera Shares 1.9 | 1.9.9 → dernières | Pas de correctif indiqué |
Autres CVE de Aspera Shares
Les 17 CVE de Aspera Shares →
CVE-2025-66487
IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send…
2.7
Faible
CVE-2025-66486
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection
4.8
Moyenne
CVE-2025-66485
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…
5.4
Moyenne
CVE-2025-66484
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting
5.5
Moyenne