Known vulnerabilities in IBM Aspera High-Speed Transfer Server

Known vulnerabilities in IBM Aspera High-Speed Transfer Server

Vendor: IBM Corporation

Software: IBM Aspera High-Speed Transfer Server

Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_high-speed_transfer_server:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 10

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU116641 - Improper Authentication CVE-2025-46818	CWE-287	Medium	Available	No	4.4.7	07.10.2025	SB2025100706 SB2025100709 SB2025100710 and 39 more
#VU116640 - Out-of-bounds read CVE-2025-46819	CWE-125	Medium	Available	No	4.4.7	07.10.2025	SB2025100706 SB2025100709 SB2025100710 and 39 more
#VU116639 - Integer overflow CVE-2025-46817	CWE-190	High	Available	No	4.4.7	07.10.2025	SB2025100706 SB2025100709 SB2025100710 and 46 more
#VU116609 - Use After Free CVE-2025-49844	CWE-416	Medium	Available	No	4.4.7	06.10.2025	SB2025100629 SB2025100633 SB2025100709 and 56 more
#VU62644 - Exposure of sensitive information to an unauthorized actor CVE-2022-27776	CWE-200	Low	No	No	4.4.1	27.04.2022	SB2022042706 SB2022042803 SB2022042904 and 62 more
#VU62643 - Resource Management Errors CVE-2022-27775	CWE-399	Low	No	No	4.4.1	27.04.2022	SB2022042706 SB2022042803 SB2022042904 and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor CVE-2022-27774	CWE-200	Medium	No	No	4.4.1	27.04.2022	SB2022042706 SB2022042803 SB2022042904 and 57 more
#VU62359 - Incorrect Default Permissions CVE-2022-22391	CWE-276	Low	No	No	4.3.2	15.04.2022	SB2022041524
#VU53589 - Use After Free CVE-2021-22901	CWE-416	High	No	No	4.2	26.05.2021	SB2021052620 SB2021052711 SB2021052719 and 18 more
#VU53587 - Use of Uninitialized Variable CVE-2021-22898	CWE-457	Medium	No	No	4.2	26.05.2021	SB2021052620 SB2021052711 SB2021060128 and 47 more