7.5

CVE-2026-8180

Multiple vulnerabilities in Aspera applications.

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Aspera High-speed Transfer Endpoint Version >= 3.7.4 <= 4.4.6
Ibm ≫ Aspera High-speed Transfer Endpoint Version4.4.7 Update-
Ibm ≫ Aspera High-speed Transfer Endpoint Version4.4.7 Updatefixpack1
Ibm ≫ Aspera High-speed Transfer Server Version >= 3.7.4 <= 4.4.6
Ibm ≫ Aspera High-speed Transfer Server Version4.4.7 Update-
Ibm ≫ Aspera High-speed Transfer Server Version4.4.7 Updatefixpack1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.235
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@us.ibm.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.ibm.com/support/pages/node/7273615
Vendor Advisory