Loading vulnerability details…
CVSS v3.1
4.3
EPSS
0.21%
Published
Oct 9, 2025
Modified
Oct 14, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NWeaknesses (CWE)
Affected Products (3)
References (1)