Aspera Shares
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_shares:1.11.0:*:*:*:*:*:*:*
part: a version: 1.11.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Shares (7fcc529e-2e2f-553f-bc9b-c255c64d8683) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66487 |
vulnerable | 2026-06-08 07:41:19.034258 |
Multiple vulnerabilities have been addressed in IBM Aspera Shares
LOW (2.7)
IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.
Published: 2026-04-01T23:04:18.779Z
Updated: 2026-04-02T13:32:28.743Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66486 |
vulnerable | 2026-06-08 07:41:19.033848 |
Multiple vulnerabilities have been addressed in IBM Aspera Shares
MEDIUM (4.8)
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2026-04-01T23:03:45.642Z
Updated: 2026-04-03T13:56:04.348Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66485 |
vulnerable | 2026-06-08 07:41:19.033149 |
Multiple vulnerabilities have been addressed in IBM Aspera Shares
MEDIUM (5.4)
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Published: 2026-04-01T23:01:47.211Z
Updated: 2026-04-02T18:10:25.437Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66484 |
vulnerable | 2026-06-08 07:41:19.031202 |
Multiple vulnerabilities have been addressed in IBM Aspera Shares
MEDIUM (5.5)
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-04-01T22:59:29.254Z
Updated: 2026-04-02T13:49:58.262Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66483 |
vulnerable | 2026-06-08 07:41:19.029281 |
Multiple vulnerabilities have been addressed in IBM Aspera Shares
MEDIUM (6.3)
IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.
Published: 2026-04-01T22:56:38.441Z
Updated: 2026-04-02T13:33:16.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13916 |
vulnerable | 2026-06-08 07:06:32.965716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.