Known vulnerabilities in IBM Aspera Shares

Vendor: IBM Corporation
Software: IBM Aspera Shares
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_shares:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Shares IBM Aspera Shares is affected by 24 known vulnerabilities: 1 high, 15 medium, 8 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108099 - Insufficient Session Expiration
CVE-2024-38315		 CWE-613 Low
No
No
 1.10.0 PL3 01.05.2025 SB2025050111
#VU97582 - Session Fixation
CVE-2023-38018		 CWE-384 Low
No
No
 1.10.0 PL3 19.09.2024 SB2024091908
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 1.10.0 PL4 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 1.10.0 PL4 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 1.10.0 PL4 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 1.10.0 PL4 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 1.10.0 PL4 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 1.10.0 PL4 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 1.10.0 PL4 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 1.10.0 PL4 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 1.10.0 PL4 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 1.10.0 PL4 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU60166 - Cryptographic Issues
CVE-2021-4160		 CWE-310 Low
No
No
 1.10.0 PL4 28.01.2022 SB2022012811
SB2022031611
SB2022042517
and 29 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182		 CWE-79 Medium
No
No
 1.10.0 PL1 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 1.10.0 PL1 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 1.10.0 PL1 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 1.10.0 PL4 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 1.9.15 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU30256 - Out-of-bounds read
CVE-2019-20838		 CWE-125 Medium
No
No
 1.10.0 PL4 15.06.2020 SB2020061529
SB2021010712
SB2021020201
and 24 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656		 CWE-79 Medium
No
No
 1.9.15 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more


Showing elements 1 - 20 out of 24