Aller au contenu

Vulnérabilités connues pour IBM Aspera Console

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-13212 IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email… 5.3 Moyenne 13 mars 2026
CVE-2025-13459 IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper… 2.7 Faible 13 mars 2026
CVE-2025-13460 IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response… 5.3 Moyenne 13 mars 2026
CVE-2025-13379 IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection 8.6 Élevée 5 févr. 2026
CVE-2025-13925 IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local… 4.9 Moyenne 20 janv. 2026
CVE-2022-43850 IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting 5.4 Moyenne 14 avr. 2025
CVE-2022-43840 IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an… 4.3 Moyenne 14 avr. 2025
CVE-2022-43851 IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker… 5.9 Moyenne 14 avr. 2025
CVE-2023-27272 IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system 3.1 Faible 14 avr. 2025
CVE-2022-43852 IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in… 5.3 Moyenne 14 avr. 2025
CVE-2022-43847 IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input… 5.4 Moyenne 14 avr. 2025
CVE-2021-38963 IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the… 8.0 Élevée 24 sept. 2024
CVE-2022-43845 IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the… 3.7 Faible 24 sept. 2024
CVE-2022-43841 IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on… 4.0 Moyenne 30 mai 2024
CVE-2022-43575 IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting 5.4 Moyenne 30 mai 2024
CVE-2022-43384 IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting 4.6 Moyenne 30 mai 2024
CVE-2022-43842 IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection 8.6 Élevée 23 févr. 2024
CVE-2021-38927 IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting 7.2 Élevée 25 déc. 2023

Autres produits IBM