EUVD-2026-98088

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

EUVD-2026-98089

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-98086

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

EUVD-2026-98090

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-75782

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75076

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

CVE-2026-75095

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-75621

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

CVE-2026-75076 IBM Aspera Enterprise Webapps Information Disclosure

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

CVE-2026-75076

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an information disclosure flaw. The root cause is the exposure of JavaScript source map files , which could allow a remote attacker to obtain sensitive information. This vulnerability is associated with CWE-200 . Remedia...

CVE-2026-75095 IBM Aspera Enterprise Webapps Denial of Service

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-75095

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a Denial of Service (DoS) attack. The root cause is uncontrolled resource consumption (CWE-400), which allows a remote attacker to exhaust resources and disrupt the service. The vulnerability has a CVSS v3.1 score of 7.5...

CVE-2026-75621

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a security issue where a local attacker could obtain sensitive information. The root cause is the assignment of excessive permissions to a service account (CWE-250). To remediate this vulnerability, IBM strongly recommen...

CVE-2026-75621 IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

CVE-2026-75782 IBM Aspera Enterprise Webapps Untrusted Search Path

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an untrusted search path issue. A local attacker can exploit a misconfigured PATH environment variable to gain elevated privileges . This vulnerability is associated with CWE-426 . To remediate this issue, IBM strongly r...

CVE-2026-92832 IBM Aspera Enterprise Webapps Information Disclosure

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-92832

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an information disclosure flaw (CVE-2026-92832). A local attacker can obtain sensitive information because the application transmits such data in cleartext (CWE-319). To remediate this vulnerability, IBM strongly recomme...