← CVE Intelligence

CVE-2025-0162

IBM Aspera Shares XML external entity injection PUBLISHED

Description (CNA)

IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected (CNA)

Vendor / productVersions
IBM / Aspera Sharesaffected 1.9.9 through 1.10.0 PL7

CWE

CWE-611

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.