CVE-2025-13481

IBM Aspera Orchestrator Command Injection PUBLISHED

Description (CNA)

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Orchestrator	affected 4.0.0 through 4.1.0

CWE

CWE-78

References

https://www.ibm.com/support/pages/node/7254434

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.