CVE-2025-13211

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-12-11

Last modified

2026-10-07

Weaknesses

CWE-799

Affected products

• Aspera Orchestrator (Ibm)

References

• https://www.ibm.com/support/pages/node/7254434