Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Priority LOW 29

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2026-05-27 No fix listed CWE-22
Priority LOW 39

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential deni…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00319 Published 2026-05-27 No fix listed CWE-476
Priority MEDIUM 40

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00401 Published 2026-05-27 No fix listed CWE-121
Priority MEDIUM 50

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0058 Published 2026-05-27 No fix listed CWE-122
Priority LOW 38

Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.03093 Published 2020-06-10 No fix listed CWE-120
Priority LOW 36

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01616 Published 2020-06-10 No fix listed CWE-787
Priority LOW 38

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02604 Published 2020-06-10 No fix listed CWE-120
Priority MEDIUM 41

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.05261 Published 2020-06-10 No fix listed CWE-20
TI-2020-03799 CVE-2020-4432 · GHSA-rh96-qpcc-23m2

Command injection in IBM Aspera Streaming

Priority LOW 39

Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.03423 Published 2020-06-10 No fix listed CWE-77