1318 matches found
CVE-2024-38317 IBM Aspera Shares Cross-Site Scripting
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2024-38317
CVE-2024-38317 affects IBM Aspera Shares 1.9.0–1.10.0 PL6. A privileged user can embed arbitrary JavaScript in the Web UI, potentially disclosing credentials in a trusted session (XSS). IBM’s bulletin notes remediation: upgrade to 1.10.0 PL7 (Linux/Windows). No exploitation status provided in the...
CVE-2024-38317 IBM Aspera Shares Cross-Site Scripting
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2024-38316
CVE-2024-38316 affects IBM Aspera Shares 1.9.0–1.10.0 PL6, where an authenticated user’s ability to send emails is not properly rate-limited, potentially enabling email flooding and denial of service. The IBM Security Bulletin describes the vulnerability (CWE-770: Allocation of Resources Without ...
CVE-2024-38316 IBM Aspera Shares Denial of Service
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service...
CVE-2024-38316 IBM Aspera Shares Denial of Service
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service...
Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)
Summary This Security Bulletin addresses multiple high severity OpenSSL security vulnerabilities that have been remediated in IBM Aspera Shares 1.10.0 PL4. Vulnerability Details CVEID:CVE-2022-1586 DESCRIPTION: PCRE2 could allow a remote attacker to execute arbitrary code on the system, caused by...
IBM Aspera Shares 安全漏洞
IBM Aspera Shares is a Web application from International Business Machines IBM. An input validation error vulnerability exists in IBM Aspera Shares, which stems from improper validation of the "Client-IP" header, and can be exploited by an attacker to spoof its IP address written to a log file...
IBM Aspera Shares 跨站脚本漏洞
IBM Aspera Shares is a web application from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Shares that stems from the inclusion of a stored cross-site scripting vulnerability. The vulnerability allows an authenticated user to embed arbitrary...
PT-2025-5782 · Ibm · Ibm Aspera Shares
Name of the Vulnerable Software and Affected Versions: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 Description: This issue allows authenticated users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure...
IBM Aspera Shares 跨站脚本漏洞
IBM Aspera Shares is a Web application from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which...
IBM Aspera Shares 安全漏洞
IBM Aspera Shares is a web application from International Business Machines IBM. A security vulnerability exists in IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6, which stems from not properly limiting the frequency of e-mail sent by authenticated users...
PT-2025-5783 · Ibm · Ibm Aspera Shares
Name of the Vulnerable Software and Affected Versions: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 Description: The issue allows an attacker to spoof their IP address, which is then written to log files, due to improper verification of Client-IP headers. Recommendations: For versions 1.9....
IBM Aspera Shares 安全漏洞
IBM Aspera Shares is a Web application from International Business Machines IBM. IBM Aspera Shares suffers from an HTML injection vulnerability. The vulnerability stems from the application's lack of valid filtering and escaping of user-supplied data, which can be exploited by an attacker to inje...
IBM Aspera Shares 代码问题漏洞
IBM Aspera Shares is a web application from International Business Machines IBM. A code issue vulnerability exists in IBM Aspera Shares that stems from the inclusion of a server-side request forgery vulnerability. It could allow an authenticated attacker to send unauthorized requests from the...
PT-2025-5778 · Ibm · Ibm Aspera Shares
Name of the Vulnerable Software and Affected Versions: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 Description: This issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...
PT-2025-5779 · Ibm · Ibm Aspera Shares
Name of the Vulnerable Software and Affected Versions: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 Description: The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting sit...
IBM Aspera Shares 代码问题漏洞
IBM Aspera Shares is a Web application from International Business Machines IBM. IBM Aspera Shares suffers from a server-side request forgery vulnerability that stems from the server not implementing an adequate authentication mechanism to confirm the origin of a request, which could be exploited...
