Aspera Enterprise WebApps vulnerabilities

3 known vulnerabilities in Aspera Enterprise WebApps from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Aspera Enterprise WebApps: Untrusted Search Path

  CVE-2026-75782Oct 12, 2026IBM

  IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

• 7.5 High severity

  Aspera Enterprise WebApps: Uncontrolled Resource Consumption

  CVE-2026-75095Oct 12, 2026IBM

  IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

• 8.8 High severity

  Aspera Enterprise WebApps: Improper Privilege Management

  CVE-2026-75777Sep 10, 2026IBM

  IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.