CVE-2025-13481

High CVSS: 8.8

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Vendor

Ibm

Product

Aspera Orchestrator

CWE

CWE-78

Yayın Tarihi

2025-12-11 20:15:53

Güncelleme

2025-12-15 19:02:24

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-78 Aspera Orchestrator HIGH Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7254434

Benzer Kayıtlar

Medium

CVE-2025-13044

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar…

Medium

CVE-2026-1243

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authe…

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…