2.7
Faible
CVE-2025-66487 IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send…
Description
IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aspera Shares 1.9 | 1.9.9 → 1.11.0 | Pas de correctif indiqué |
Autres CVE de Aspera Shares
Les 17 CVE de Aspera Shares →
CVE-2025-66486
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection
4.8
Moyenne
CVE-2025-66485
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…
5.4
Moyenne
CVE-2025-66484
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting
5.5
Moyenne
CVE-2025-66483
IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an…
6.3
Moyenne