Aspera Enterprise Webapps IBM Aspera Enterprise Webapps

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in IBM Aspera Enterprise Webapps.

By the Year

In 2026 there have been 6 vulnerabilities in IBM Aspera Enterprise Webapps with an average score of 6.6 out of ten.

Year Vulnerabilities Average Score
2026 6 6.62

It may take a day or so for new Aspera Enterprise Webapps vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent IBM Aspera Enterprise Webapps Security Vulnerabilities

IBM Aspera Enterprise WebApps 1.0.0-1.0.6 Source Map Info Disclosure
CVE-2026-75076 4.3 - Medium - October 12, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

Information Disclosure

IBM Aspera WebApps 1.0.0-1.0.6 DoS via uncontrolled resource use
CVE-2026-75095 7.5 - High - October 12, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Resource Exhaustion

IBM Aspera WebApps 1.0.0-1.0.6 Local Priv via Service Account Permissions
CVE-2026-75621 6.2 - Medium - October 12, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

Execution with Unnecessary Privileges

IBM Aspera Enterprise WebApps 1.0.0-1.0.6 PATH ENV Local Priv Esc
CVE-2026-75782 7.8 - High - October 12, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

Untrusted Path

IBM Aspera Enterprise WebApps 1.0.0-1.0.6: Local Attacker Can Read Sensitive Data
CVE-2026-92832 5.1 - Medium - October 12, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

Cleartext Transmission of Sensitive Information

IBM Aspera Enterprise WebApps 1.0.0-1.0.5: Local Cntr Escape via Syscalls
CVE-2026-75777 8.8 - High - September 10, 2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.

Improper Privilege Management

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for IBM Aspera Enterprise Webapps or by IBM? Click the Watch button to subscribe.

IBM
Vendor

subscribe