📦 Aspera Orchestrator

CVE-2025-13214 is a SQL injection vulnerability in IBM Aspera Orchestrator that allows remote attackers to execute arbitrary SQL commands. This could enable attackers to view, modify, or delete databa...

This vulnerability allows authenticated users of IBM Aspera Orchestrator to execute arbitrary commands with elevated system privileges due to improper input validation. It affects versions 4.0.0 throu...

This vulnerability in IBM Aspera Orchestrator allows authenticated users to change other users' passwords without knowing their current passwords. This affects all installations of IBM Aspera Orchestr...

CVE-2023-37407 is an OS command injection vulnerability in IBM Aspera Orchestrator that allows authenticated remote attackers to execute arbitrary commands on the system. This affects organizations us...

This vulnerability in IBM Aspera Orchestrator allows authenticated users to cause denial of service in the email service by sending requests at a frequency that overwhelms the system. It affects users...

IBM Aspera Orchestrator 4.0.1 has a cross-site request forgery (CSRF) vulnerability that allows attackers to trick authenticated users into performing unauthorized actions. This affects organizations ...

IBM Aspera Orchestrator 4.0.1 fails to invalidate user sessions after password changes, allowing authenticated users to maintain access with old credentials and potentially impersonate other users. Th...