| CVE-2025-13213 |
IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Moyenne
|
10 mars 2026 |
| CVE-2025-13219 |
IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters
|
5.9
Moyenne
|
10 mars 2026 |
| CVE-2025-13214 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection
|
7.6
Élevée
|
11 déc. 2025 |
| CVE-2025-13148 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another…
|
8.1
Élevée
|
11 déc. 2025 |
| CVE-2025-13481 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with…
|
8.8
Élevée
|
11 déc. 2025 |
| CVE-2025-13211 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the…
|
5.3
Moyenne
|
11 déc. 2025 |
| CVE-2023-26288 |
IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated…
|
5.5
Moyenne
|
30 juil. 2024 |
| CVE-2023-38001 |
IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
6.5
Moyenne
|
30 juil. 2024 |
| CVE-2023-26289 |
IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
|
5.4
Moyenne
|
30 juil. 2024 |
| CVE-2023-27283 |
IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response…
|
5.3
Moyenne
|
4 mai 2024 |
| CVE-2023-37407 |
IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by…
|
8.8
Élevée
|
3 mai 2024 |