IBM Aspera Console 3.4.8
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_console:3.4.8:*:*:*:*:*:*:*
part: a version: 3.4.8 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Console (46593f94-d19b-5f25-aed9-93f3ad1e039b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13460 |
vulnerable | 2026-06-08 07:04:32.261773 |
IBM Aspera Console Information Disclosure
MEDIUM (5.3)
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
Published: 2026-03-13T19:54:04.254Z
Updated: 2026-03-16T13:50:17.157Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13459 |
vulnerable | 2026-06-08 07:04:32.260927 |
IBM Aspera Console Denial of Service
LOW (2.7)
IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.
Published: 2026-03-13T19:54:05.962Z
Updated: 2026-03-16T13:51:49.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13379 |
vulnerable | 2026-06-08 07:04:32.103448 |
A SQL Injection vulnerability has been addressed in IBM Aspera Console
HIGH (8.6)
IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2026-02-05T13:30:04.998Z
Updated: 2026-02-26T15:04:18.212Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13212 |
vulnerable | 2026-06-08 07:04:31.798880 |
IBM Aspera Console Denial of Service
MEDIUM (5.3)
IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
Published: 2026-03-13T19:54:10.521Z
Updated: 2026-03-16T13:53:57.011Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.