2 CVEs
MEDIUM
CVSS 5.4
IBM Aspera Header Injection
2026-03-10
CVE-2025-13213
MEDIUM
Aspera Orchestrator versions up to 4.1.2 contains a vulnerability that allows attackers to conduct various attacks against the vulnerable system, including cross-site scri (CVSS 5.4).
5.4
CVSS
0.0%
EPSS
CVE-2025-36227
MEDIUM
Aspera Faspex versions up to 5.0.14.3 contains a vulnerability that allows attackers to conduct various attacks against the vulnerable system, including cross-site scri (CVSS 5.4).
5.4
CVSS
0.0%
EPSS