Skip to content
OpenAdvisories

Product · IBM

Aspera Orchestrator

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.6
    CVE-2025-13214

    IBM Aspera Orchestrator SQL Injection

    IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

    IBM Aspera Orchestrator
  • High 8.1
    CVE-2025-13148

    IBM Aspera Orchestrator Unverified Password Change

    IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.

    IBM Aspera Orchestrator
  • High 8.8
    CVE-2025-13481

    IBM Aspera Orchestrator Command Injection

    IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

    IBM Aspera Orchestrator
  • High 8.8
    CVE-2023-37407

    IBM Aspera Orchestrator command execution

    IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116.

    IBM Aspera Orchestrator