Ibm Aspera Console vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Aspera Console: 5 record(s), with affected versions and fixes.cpe:2.3:a:ibm:aspera_console
CVE-2025-13460
Medium · 5.3
CWE-204 Mar 16, 2026
IBM Aspera Console Information Disclosure
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
CVE-2025-13459
Medium · 4.9
CWE-841 Mar 16, 2026
IBM Aspera Console Denial of Service
IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.
CVE-2025-13212
Medium · 4.3
CWE-799 Mar 16, 2026
IBM Aspera Console Denial of Service
IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
CVE-2025-13379
High · 8.6
CWE-89 Feb 5, 2026
A SQL Injection vulnerability has been addressed in IBM Aspera Console
IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVE-2025-13925
Medium · 4.9
CWE-532 Jan 20, 2026
Multiple vulnerabilities in IBM Aspera Console
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user.