Aspera Connect (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2023-06-05. Vendor: Ibm.

CVEs of Aspera Connect

• CVE-2023-27285 - CVSS 8.4 (high), 2023-06-05: IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a…
• CVE-2023-22862 - CVSS 7.5 (high), 2023-06-05: IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized…
• CVE-2023-27286 - CVSS 9.8 (critical), 2023-04-02: IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a…
• CVE-2023-27284 - CVSS 9.8 (critical), 2023-04-02: IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a…
• CVE-2020-4545 - CVSS 7.8 (high), 2020-09-04: IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the…