1500 matches found
EUVD-2026-98090
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...
EUVD-2026-98089
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-98088
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...
EUVD-2026-98086
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...
EUVD-2026-98087
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...
CVE-2026-92832
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...
CVE-2026-75095
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-75076
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an information disclosure flaw. The root cause is the exposure of JavaScript source map files , which could allow a remote attacker to obtain sensitive information. This vulnerability is associated with CWE-200 . Remedia...
CVE-2026-75095
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a Denial of Service (DoS) attack. The root cause is uncontrolled resource consumption (CWE-400), which allows a remote attacker to exhaust resources and disrupt the service. The vulnerability has a CVSS v3.1 score of 7.5...
CVE-2026-75621
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a security issue where a local attacker could obtain sensitive information. The root cause is the assignment of excessive permissions to a service account (CWE-250). To remediate this vulnerability, IBM strongly recommen...
CVE-2026-75782
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an untrusted search path issue. A local attacker can exploit a misconfigured PATH environment variable to gain elevated privileges . This vulnerability is associated with CWE-426 . To remediate this issue, IBM strongly r...
CVE-2026-92832
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an information disclosure flaw (CVE-2026-92832). A local attacker can obtain sensitive information because the application transmits such data in cleartext (CWE-319). To remediate this vulnerability, IBM strongly recomme...
CVE-2026-92832 IBM Aspera Enterprise Webapps Information Disclosure
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...
CVE-2022-47986
CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps
Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.7 Vulnerability Details CVEID:CVE-2026-75095 DESCRIPTION: IBM Aspera Enterprise WebApps could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. CWE:CWE-400:...
Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares
Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...
CVE-2022-47986
CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: python3 poc.py https://xxxxx whoami...
IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via a YAML deserialization flaw. This can allow an attacker to send a specially crafted obsolete API call and thereby execute arbitrary code, obtain sensitive data, and/or execute other unauthorized operations...
Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway
Summary Multiple vulnerabilities were addressed in IBM Aspera HTTP Gateway version 2.3.5 Vulnerability Details ID:WS-2026-0043 DESCRIPTION: Denial of service via exponential $ref expansion in ExpandSpec/ExpandSchema in github.com/go-openapi/spec. The expander inlines every $ref without memoizatio...