| CVE-2025-13212 |
IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email…
|
5.3
Medium
|
Mar 13, 2026 |
| CVE-2025-13459 |
IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper…
|
2.7
Low
|
Mar 13, 2026 |
| CVE-2025-13460 |
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response…
|
5.3
Medium
|
Mar 13, 2026 |
| CVE-2025-13379 |
IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection
|
8.6
High
|
Feb 5, 2026 |
| CVE-2025-13925 |
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local…
|
4.9
Medium
|
Jan 20, 2026 |
| CVE-2022-43850 |
IBM Aspera Console 3.4.0 through 3.4.4
is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 14, 2025 |
| CVE-2022-43840 |
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an…
|
4.3
Medium
|
Apr 14, 2025 |
| CVE-2022-43851 |
IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker…
|
5.9
Medium
|
Apr 14, 2025 |
| CVE-2023-27272 |
IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system
|
3.1
Low
|
Apr 14, 2025 |
| CVE-2022-43852 |
IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in…
|
5.3
Medium
|
Apr 14, 2025 |
| CVE-2022-43847 |
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input…
|
5.4
Medium
|
Apr 14, 2025 |
| CVE-2021-38963 |
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the…
|
8.0
High
|
Sep 24, 2024 |
| CVE-2022-43845 |
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the…
|
3.7
Low
|
Sep 24, 2024 |
| CVE-2022-43841 |
IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on…
|
4.0
Medium
|
May 30, 2024 |
| CVE-2022-43575 |
IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 30, 2024 |
| CVE-2022-43384 |
IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting
|
4.6
Medium
|
May 30, 2024 |
| CVE-2022-43842 |
IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection
|
8.6
High
|
Feb 23, 2024 |
| CVE-2021-38927 |
IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting
|
7.2
High
|
Dec 25, 2023 |