CVE-2023-37407

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/260116 · Vendor Advisory
• ibm.com/support/pages/node/7150117 · Vendor Advisory

Lỗ hổng khác của aspera orchestrator

• CVE-2025-13213TRUNG BÌNH 5.4IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST heade…
• CVE-2025-13219CAO 7.5IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unaut…
• CVE-2025-13481CAO 8.8IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the …
• CVE-2025-13214CAO 8.8IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, w…
• CVE-2025-13211TRUNG BÌNH 6.5IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to impro…