Vulnerabilities

TI-2026-71442 CVE-2026-75076 · GHSA-jqrq-q95g-2fwg

Source map exposure in IBM Aspera Enterprise WebApps leaks information

LOW 19

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00172 Published 2026-10-12 No fix listed CWE-200

TI-2026-71443 CVE-2026-75095 · GHSA-mxxx-63r9-2g9p

Uncontrolled resource consumption in IBM Aspera Enterprise WebApps

LOW 39

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0032 Published 2026-10-12 No fix listed CWE-400

TI-2026-71444 CVE-2026-75621 · GHSA-vx8g-v6gf-m6h7

Excessive service account permissions in IBM Aspera Enterprise WebApps

LOW 26

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00117 Published 2026-10-12 No fix listed CWE-250

TI-2026-71445 CVE-2026-75782 · GHSA-x973-hj72-fc88

IBM Aspera Enterprise WebApps untrusted search path privilege escalation

LOW 35

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00107 Published 2026-10-12 No fix listed CWE-426

TI-2026-71453 CVE-2026-92832 · GHSA-5rr3-m6px-jp24

IBM Aspera Enterprise Webapps Information Disclosure

LOW 28

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00073 Published 2026-10-12 No fix listed CWE-319