Advisories · Technology

IBM Aspera Orchestrator.

Every CVE that names IBM Aspera Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13213 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in IBM Aspera Orchestrator
- IBM Aspera Orchestrator
- CWE-644
Not analysed yet 10 Mar 2026
CVE-2025-13219 CVE record

CVSS 5.9 Medium

Multiple vulnerabilities in IBM Aspera Orchestrator
- IBM Aspera Orchestrator
- CWE-598
Not analysed yet 10 Mar 2026
CVE-2025-13214 CVE record

CVSS 7.6 High

IBM Aspera Orchestrator SQL Injection
- IBM Aspera Orchestrator
- SQL injection
Not analysed yet 11 Dec 2025
CVE-2025-13148 CVE record

CVSS 8.1 High

IBM Aspera Orchestrator Unverified Password Change
- IBM Aspera Orchestrator
- CWE-620
Not analysed yet 11 Dec 2025
CVE-2025-13481 CVE record

CVSS 8.8 High

IBM Aspera Orchestrator Command Injection
- IBM Aspera Orchestrator
- Command injection
Not analysed yet 11 Dec 2025
CVE-2025-13211 CVE record

CVSS 5.3 Medium

IBM Aspera Orchestrator Denial of Service
- IBM Aspera Orchestrator
- CWE-799
Not analysed yet 11 Dec 2025
CVE-2023-26288 CVE record

CVSS 5.5 Medium

IBM Aspera Orchestrator session fixation
- IBM Aspera Orchestrator
- Authentication bypass
Not analysed yet 30 Jul 2024
CVE-2023-38001 CVE record

CVSS 6.5 Medium

IBM Aspera Orchestrator cross-site request forgery
- IBM Aspera Orchestrator
- Cross-site request forgery (CSRF)
Not analysed yet 30 Jul 2024
CVE-2023-26289 CVE record

CVSS 5.4 Medium

IBM Aspera Orchestrator HTTP header injection
- IBM Aspera Orchestrator
- CWE-644
Not analysed yet 30 Jul 2024
CVE-2023-27283 CVE record

CVSS 5.3 Medium

IBM Aspera Orchestrator information disclosure
- IBM Aspera Orchestrator
- CWE-204
Not analysed yet 4 May 2024
CVE-2023-37407 CVE record

CVSS 8.8 High

IBM Aspera Orchestrator command execution
- IBM Aspera Orchestrator
- Command injection
Not analysed yet 3 May 2024