| CVE-2025-13213 |
IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Medium
|
Mar 10, 2026 |
| CVE-2025-13219 |
IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters
|
5.9
Medium
|
Mar 10, 2026 |
| CVE-2025-13214 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection
|
7.6
High
|
Dec 11, 2025 |
| CVE-2025-13148 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another…
|
8.1
High
|
Dec 11, 2025 |
| CVE-2025-13481 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with…
|
8.8
High
|
Dec 11, 2025 |
| CVE-2025-13211 |
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the…
|
5.3
Medium
|
Dec 11, 2025 |
| CVE-2023-26288 |
IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated…
|
5.5
Medium
|
Jul 30, 2024 |
| CVE-2023-38001 |
IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
6.5
Medium
|
Jul 30, 2024 |
| CVE-2023-26289 |
IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
|
5.4
Medium
|
Jul 30, 2024 |
| CVE-2023-27283 |
IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response…
|
5.3
Medium
|
May 4, 2024 |
| CVE-2023-37407 |
IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by…
|
8.8
High
|
May 3, 2024 |