Known vulnerabilities in IBM Aspera Console - page 2

Vendor: IBM Corporation
Software: IBM Aspera Console
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_console:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 52
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Console IBM Aspera Console is affected by 52 known vulnerabilities: 1 critical, 3 high, 32 medium, 16 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98043 - Not Using Password Aging
CVE-2023-27272		 CWE-262 Low
No
No
 3.4.5 04.10.2024 SB2024100713
#VU98040 - Improper Neutralization of Data within XPath Expressions
CVE-2022-43840		 CWE-643 Low
No
No
 3.4.5 04.10.2024 SB2024100713
#VU97672 - Improper Neutralization of Formula Elements in a CSV File
CVE-2021-38963		 CWE-1236 High
No
No
 3.4.5 24.09.2024 SB2024092455
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898		 CWE-918 High
Available
No
 3.4.5 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Available
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472		 CWE-918 Medium
Available
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387		 CWE-476 Medium
No
No
 3.4.5 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU89917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43575		 CWE-79 Medium
No
No
 3.4.2 PL 10 30.05.2024 SB2024053020
#VU89916 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43384		 CWE-79 Low
No
No
 3.4.2 PL 10 30.05.2024 SB2024053020
#VU89913 - Unprotected Storage of Credentials
CVE-2022-43841		 CWE-256 Low
No
No
 3.4.2 PL 10 30.05.2024 SB2024053019
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 3.4.2 PL 10 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 3.4.2 PL 10 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 64 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 3.4.2 PL 10 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 3.4.5 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Available
No
 3.4.5 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more


Showing elements 21 - 40 out of 52