PatchTheCVEaspera console vulnerabilities and fixes
Recent CVEs affecting aspera console, with upgrade or downgrade steps. 12 tracked.
Also searched as: asperaconsole.
aspera console has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-03-16. Highest priority: CVE-2025-13379 (score 43/100).
- CVE-2025-13460 MEDIUM 5.3 UPGRADE IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable res
- CVE-2025-13459 LOW 2.7 UPGRADE IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to impro
- CVE-2025-13379 HIGH 8.6 UPGRADE IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection
- CVE-2025-13212 MEDIUM 5.3 UPGRADE IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the e
- CVE-2023-27272 LOW 3.1 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.
- CVE-2022-43852 MEDIUM 5.3 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used
- CVE-2022-43851 MEDIUM 5.9 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an
- CVE-2022-43850 MEDIUM 5.4 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting
- CVE-2022-43847 MEDIUM 5.4 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation
- CVE-2022-43845 LOW 3.7 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused b
- CVE-2022-43840 MEDIUM 4.3 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow a
- CVE-2021-38963 HIGH 8.0 UPGRADE IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code o
FAQ
How do I fix aspera console vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aspera console being exploited right now?
None of the tracked aspera console CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aspera console CVE should I patch first?
CVE-2025-13379 currently ranks highest (43/100): IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection.