IBM Aspera
5 CVEs affecting IBM Aspera. Latest disclosed: 2026-07-30. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14973 | Critical | 9.3 | 2026-07-28 | IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination. |
CVE-2023-27286 | High | 8.4 | 2023-04-02 | IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffe… |
CVE-2023-27284 | High | 8.4 | 2023-04-02 | IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffe… |
CVE-2026-11980 | High | 7.3 | 2026-07-30 | IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. |
CVE-2021-38870 | Medium | 5.4 | 2021-09-23 | IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… |