Veille CVE

Recherche « Ibm aspera »

16 CVE

Critique 3 Élevée 9 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm aspera » ✕
  1. CVE-2026-92832 5.1 Moyenne

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

  2. CVE-2026-75782 7.8 Élevée

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

  3. CVE-2026-75621 6.2 Moyenne

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

  4. CVE-2026-75095 7.5 Élevée

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

  5. CVE-2026-75076 4.3 Moyenne

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

  6. CVE-2026-75777 8.8 Élevée

    IBM Aspera Enterprise WebApps

    IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.

  7. CVE-2026-11980 7.3 Élevée

    IBM Aspera Desktop App · Ibm aspera

    IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.

  8. CVE-2026-14996 8.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

  9. CVE-2026-14973 9.3 Critique

    IBM Aspera Desktop App · Ibm aspera

    IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

  10. CVE-2026-14959 7.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

  11. CVE-2026-14958 7.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.

  12. CVE-2026-9035 6.5 Moyenne

    IBM Aspera High-Speed Transfer Endpoint · IBM Aspera High-Speed Transfer Server

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd component. An authenticated user may be able to take advantage of this vulnerability to access files in the server’s local storage that they should not have access to.

  13. CVE-2026-8180 7.5 Élevée

    IBM Aspera High-Speed Transfer Endpoint · IBM Aspera High-Speed Transfer Server

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.

  14. CVE-2026-8179 8.8 Élevée

    IBM Aspera High-Speed Transfer Endpoint · IBM Aspera High-Speed Transfer Server

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could allow an authenticated user to execute arbitrary code on the system.

  15. CVE-2026-8175 9.8 Critique

    IBM Aspera High-Speed Transfer Endpoint · IBM Aspera High-Speed Transfer Server

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

  16. CVE-2026-7876 9.1 Critique

    IBM Aspera HSTS for CP4I · Ibm aspera high-speed transfer server for cloud pak for integration

    IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.