Ibm Aspera Enterprise WebApps vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Aspera Enterprise WebApps: 6 record(s), with affected versions and fixes.
CVE-2026-92832
Medium · 5.1
CWE-319 Oct 12, 2026
IBM Aspera Enterprise Webapps Information Disclosure
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
CVE-2026-75782
High · 7.8
CWE-426 Oct 12, 2026
IBM Aspera Enterprise Webapps Untrusted Search Path
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
CVE-2026-75621
Medium · 6.2
CWE-250 Oct 12, 2026
IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
CVE-2026-75095
High · 7.5
CWE-400 Oct 12, 2026
IBM Aspera Enterprise Webapps Denial of Service
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-75076
Medium · 4.3
CWE-200 Oct 12, 2026
IBM Aspera Enterprise Webapps Information Disclosure
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
CVE-2026-75777
High · 8.8
CWE-269 Sep 10, 2026
Multiple vulnerabilities in IBM Aspera Enterprise Webapps
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.