Aspera Shares vulnerabilities

2 known vulnerabilities in Aspera Shares from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Aspera Shares: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-13916Apr 1, 2026IBM

  IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information

• 7.1 High severity

  Aspera Shares: Improper Restriction of XML External Entity Reference

  CVE-2025-0162Mar 7, 2025IBM

  IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.