IBM Aspera Orchestrator
Moderate fix1 remedy
cpe:2.3:a:ibm:aspera_orchestrator:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 4.0.0, <= 4.1.0
IBM Aspera Orchestrator SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in IBM Aspera Orchestrator versions 4.0.0 through 4.1.0. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.
Impact
Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate database information by adding, modifying, or deleting records.
Remediation
Users are advised to upgrade to IBM Aspera Orchestrator version 4.1.1. Instructions for downloading this version are available on the IBM Support Fix Central website.
Added: Dec 11, 2025, 8:33 PM
Updated: Dec 11, 2025, 8:33 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
5.0exploitability
5.2remediation
7.7relevance
1.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.