VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 5, 2026· Updated Feb 26, 2026

A SQL Injection vulnerability has been addressed in IBM Aspera Console

CVE-2025-13379

Description

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Affected products

2
  • IBM/Aspera Consolev5
    cpe:2.3:a:ibm:aspera_console:3.4.0:*:*:*:*:*:*:*
    Range: 3.4.0
  • IBM/Aspera Consolellm-fuzzy
    Range: >=3.4.0, <=3.4.8

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.