VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 11, 2025· Updated Dec 11, 2025

IBM Aspera Orchestrator Command Injection

CVE-2025-13481

Description

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Aspera Orchestratorcpe-rescue2 versions
    cpe:2.3:a:ibm:aspera_orchestrator:4.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_orchestrator:4.0.0:*:*:*:*:*:*:*range: 4.0.0
    • (no CPE)range: >=4.0.0 <=4.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.