IBM Aspera Orchestrator 4.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_orchestrator:4.0.1:*:*:*:*:*:*:*
part: a version: 4.0.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Orchestrator (a9d3e8b0-a5be-5881-9d05-00feb10509a7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38001 |
vulnerable | 2026-06-08 06:08:16.673068 |
IBM Aspera Orchestrator cross-site request forgery
MEDIUM (6.5)
IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260206.
Published: 2024-07-30T16:54:07.076Z
Updated: 2024-08-02T17:23:27.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37407 |
vulnerable | 2026-06-08 06:08:15.257266 |
IBM Aspera Orchestrator command execution
HIGH (8.8)
IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116.
Published: 2024-05-03T15:35:20.652Z
Updated: 2024-08-02T17:16:29.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27283 |
vulnerable | 2026-06-08 05:57:40.794844 |
IBM Aspera Orchestrator information disclosure
MEDIUM (5.3)
IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545.
Published: 2024-05-04T13:16:14.314Z
Updated: 2024-08-02T12:09:42.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26289 |
vulnerable | 2026-06-08 05:57:39.062937 |
IBM Aspera Orchestrator HTTP header injection
MEDIUM (5.4)
IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 248478.
Published: 2024-07-30T16:50:29.871Z
Updated: 2024-08-02T11:46:23.507Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26288 |
vulnerable | 2026-06-08 05:57:39.062345 |
IBM Aspera Orchestrator session fixation
MEDIUM (5.5)
IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 248477.
Published: 2024-07-30T17:01:00.430Z
Updated: 2024-08-02T11:46:23.557Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.