Advisories · Technology

IBM Aspera Shares.

Every CVE that names IBM Aspera Shares among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-66487 CVE record

CVSS 2.7 Low

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- Denial of service
Not analysed yet 1 Apr 2026
CVE-2025-66486 CVE record

CVSS 4.8 Medium

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2025-66485 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- CWE-644
Not analysed yet 1 Apr 2026
CVE-2025-66484 CVE record

CVSS 5.5 Medium

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2025-66483 CVE record

CVSS 6.3 Medium

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- Authentication bypass
Not analysed yet 1 Apr 2026
CVE-2025-13916 CVE record

CVSS 5.9 Medium

Multiple vulnerabilities have been addressed in IBM Aspera Shares
- IBM Aspera Shares
- Weak cryptography or TLS
Not analysed yet 1 Apr 2026
CVE-2025-0162 CVE record

CVSS 7.1 High

IBM Aspera Shares XML external entity injection
- IBM Aspera Shares
- XML external entities (XXE)
Not analysed yet 7 Mar 2025
CVE-2024-56473 CVE record

CVSS 5.3 Medium

IBM Aspera Shares Data Manipulation
- IBM Aspera Shares
- Other injection
Not analysed yet 5 Feb 2025
CVE-2024-56472 CVE record

CVSS 6.4 Medium

IBM Aspera Shares Cross-Site Scripting
- IBM Aspera Shares
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2024-56471 CVE record

CVSS 5.4 Medium

IBM Aspera Shares Server-Side Request Forgery
- IBM Aspera Shares
- Server-side request forgery (SSRF)
Not analysed yet 5 Feb 2025
CVE-2024-56470 CVE record

CVSS 5.4 Medium

IBM Aspera Shares Server-Side Request Forgery
- IBM Aspera Shares
- Server-side request forgery (SSRF)
Not analysed yet 5 Feb 2025
CVE-2024-38318 CVE record

CVSS 4.8 Medium

IBM Aspera Shares HTML injection
- IBM Aspera Shares
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2024-38317 CVE record

CVSS 4.8 Medium

IBM Aspera Shares Cross-Site Scripting
- IBM Aspera Shares
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2024-38316 CVE record

CVSS 4.3 Medium

IBM Aspera Shares Denial of Service
- IBM Aspera Shares
- Denial of service
Not analysed yet 5 Feb 2025
CVE-2024-38315 CVE record

CVSS 6.3 Medium

IBM Aspera Shares session fixation
- IBM Aspera Shares
- Authentication bypass
Not analysed yet 16 Sept 2024
CVE-2023-38018 CVE record

CVSS 6.3 Medium

IBM Aspera Shares session fixation
- IBM Aspera Shares
- Authentication bypass
Not analysed yet 9 Aug 2024
CVE-2020-4731 CVE record

CVSS 6.1 Medium

IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting.
- IBM Aspera Shares
Not analysed yet 21 Sept 2020