CVE-2023-37407

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/260116 · Vendor Advisory
• ibm.com/support/pages/node/7150117 · Vendor Advisory

aspera orchestrator のその他の脆弱性

• CVE-2025-13213中 5.4IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST heade…
• CVE-2025-13219高 7.5IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unaut…
• CVE-2025-13481高 8.8IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the …
• CVE-2025-13214高 8.8IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, w…
• CVE-2025-13211中 6.5IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to impro…