Priority LOW 29
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbi…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00325 · Published 2026-05-27 · No fix listed CWE-22
Priority LOW 39
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential deni…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00319 · Published 2026-05-27 · No fix listed CWE-476
Priority MEDIUM 40
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00401 · Published 2026-05-27 · No fix listed CWE-121
Priority MEDIUM 50
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0058 · Published 2026-05-27 · No fix listed CWE-122
Priority LOW 21
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00704 · Published 2022-04-14 · No fix listed
Priority LOW 38
Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.03093 · Published 2020-06-10 · No fix listed CWE-120
Priority LOW 36
Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01616 · Published 2020-06-10 · No fix listed CWE-787
Priority LOW 38
Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.02604 · Published 2020-06-10 · No fix listed CWE-120
Priority MEDIUM 41
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.05261 · Published 2020-06-10 · No fix listed CWE-20
Priority LOW 39
Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.03423 · Published 2020-06-10 · No fix listed CWE-77