Skip to content
OpenAdvisories
Low · 2.7 CVE-2025-66487 EUVD-2025-209186GHSA-239w-6x3x-fvrr

Multiple vulnerabilities have been addressed in IBM Aspera Shares

Published Apr 1, 2026 · Updated Apr 2, 2026 · Assigned by ibm

Description

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

Affected products

VendorProductAffectedFixed
IBM Aspera Shares 1.9.9 – ≤ 1.11.0 —

References