CVE-2025-13379

A SQL Injection vulnerability has been addressed in IBM Aspera Console PUBLISHED

Description (CNA)

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Console	affected 3.4.0 through 3.4.8

CWE

CWE-89

References

https://www.ibm.com/support/pages/node/7259448

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.