Skip to content
OpenAdvisories

Product · IBM

Aspera Connect

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-120115

    Multiple vulnerabilities in IBM Aspera Connect

    IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicious website could delete or inspect account configurations.

    IBM Aspera Connect
  • Medium 6.4
    CVE-2026-120113

    Multiple vulnerabilities in IBM Aspera Connect

    IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading…

    IBM Aspera Connect
  • Medium 5.9
    CVE-2023-22862

    IBM Aspera information disclosure

    IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

    IBM Aspera Connect Aspera Cargo