Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Aspera Orchestrator — ibm.com/support/pages/node/7254434 Clear all filters
TI-2025-12081 CVE-2025-13214 · GHSA-2fph-m3pw-66wp

IBM Aspera Orchestrator SQL Injection

Priority LOW 38

IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2025-12-11 No fix listed CWE-89
TI-2025-12020 CVE-2025-13148 · GHSA-wcv9-7cmw-hf38

IBM Aspera Orchestrator Unverified Password Change

Priority LOW 37

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00277 Published 2025-12-11 No fix listed CWE-620
TI-2025-12325 CVE-2025-13481 · GHSA-82p3-cwp7-9pjw

IBM Aspera Orchestrator Command Injection

Priority MEDIUM 41

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00479 Published 2025-12-11 No fix listed CWE-78
TI-2025-12078 CVE-2025-13211 · GHSA-5rp8-95vq-wm73

IBM Aspera Orchestrator Denial of Service

Priority LOW 35

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00355 Published 2025-12-11 No fix listed CWE-799