Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:aspera_high_speed_transfer_server:4.4.7:*:*:*:*:*:*:*

part: a version: 4.4.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAspera High Speed Transfer Server (404a9f6e-5e05-5f8a-8b25-380057626b4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9035 vulnerable 2026-06-08 08:08:58.807902 Multiple vulnerabilities in Aspera applications.
MEDIUM (6.5)
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd component. An authenticated user may be able to take advantage of this vulnerability to access files in the server’s local storage that they should not have access to.
Published: 2026-05-27T13:21:43.995Z
Updated: 2026-05-27T14:47:20.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8180 vulnerable 2026-06-08 08:08:58.169525 Multiple vulnerabilities in Aspera applications.
HIGH (7.5)
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
Published: 2026-05-27T13:20:07.809Z
Updated: 2026-05-28T19:21:26.833Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8179 vulnerable 2026-06-08 08:08:58.169086 Multiple vulnerabilities in Aspera applications.
HIGH (8.8)
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could allow an authenticated user to execute arbitrary code on the system.
Published: 2026-05-27T13:17:50.877Z
Updated: 2026-05-28T03:55:31.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8175 vulnerable 2026-06-08 08:08:58.165467 Multiple vulnerabilities in Aspera applications.
CRITICAL (9.8)
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.
Published: 2026-05-27T13:17:06.154Z
Updated: 2026-05-28T03:55:29.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.