Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: IBM Aspera Shares — ibm.com/support/pages/node/7182490 Clear all filters
TI-2024-37384 CVE-2024-56473 · GHSA-gvrr-q7f9-rx5j

IBM Aspera Shares Data Manipulation

Priority LOW 30

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00283 Published 2025-02-05 No fix listed CWE-117
TI-2024-37383 CVE-2024-56472 · GHSA-5mr2-544h-qvrm

IBM Aspera Shares Cross-Site Scripting

Priority LOW 28

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00223 Published 2025-02-05 No fix listed CWE-79
TI-2024-37382 CVE-2024-56471 · GHSA-2xhr-8668-crpg

IBM Aspera Shares Server-Side Request Forgery

Priority LOW 24

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00215 Published 2025-02-05 No fix listed CWE-918
TI-2024-37381 CVE-2024-56470 · GHSA-cwfv-c5m6-g8w3

IBM Aspera Shares Server-Side Request Forgery

Priority LOW 24

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00215 Published 2025-02-05 No fix listed CWE-918
TI-2024-25592 CVE-2024-38318 · GHSA-jh56-m69f-g6q7

IBM Aspera Shares HTML injection

Priority LOW 27

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00268 Published 2025-02-05 No fix listed CWE-80
TI-2024-25591 CVE-2024-38317 · GHSA-xmf5-qc8w-4p4r

IBM Aspera Shares Cross-Site Scripting

Priority LOW 21

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00223 Published 2025-02-05 No fix listed CWE-79
TI-2024-25590 CVE-2024-38316 · GHSA-44w2-c6gq-2xxx

IBM Aspera Shares Denial of Service

Priority LOW 29

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00383 Published 2025-02-05 No fix listed CWE-770