Aspera Cargo
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_cargo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Cargo (db93371b-9ffa-5de0-bda3-bc2736475ca1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-27286 |
vulnerable | 2026-06-08 05:57:40.799339 |
IBM Aspera code execution
HIGH (8.4)
IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.
Published: 2023-03-28T20:07:54.929Z
Updated: 2025-02-18T19:17:30.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27285 |
vulnerable | 2026-06-08 05:57:40.798841 |
IBM Aspera buffer overflow
HIGH (8.4)
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248625.
Published: 2023-06-04T23:52:11.073Z
Updated: 2025-01-08T19:48:22.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27284 |
vulnerable | 2026-06-08 05:57:40.797602 |
IBM Aspera code execution
HIGH (8.4)
IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.
Published: 2023-03-28T20:07:01.832Z
Updated: 2025-02-18T20:08:49.324Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22862 |
vulnerable | 2026-06-08 05:54:27.276719 |
IBM Aspera information disclosure
MEDIUM (5.9)
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Published: 2023-06-04T23:42:57.221Z
Updated: 2025-01-08T19:50:48.115Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.