IBM Aspera Console
Moderate fix3 remedies
cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*
Moderate fix3 remedies
- >= 3.4.0, <= 3.4.8
IBM Aspera Console SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in IBM Aspera Console versions 3.4.0 through 3.4.8. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate the back-end database by executing arbitrary SQL commands. This could lead to unauthorized data access, modification, or deletion.
Remediation
Users are advised to upgrade to IBM Aspera Console version 3.4.8 FP1. This version is available for Windows, Linux, and multiplatform. Links to download the fixed version can be found on the IBM Support Fix Central website.
Added: Feb 5, 2026, 2:23 PM
Updated: Feb 5, 2026, 3:05 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
3.1exploitability
7.8remediation
7.7relevance
2.5threat
0.0urgency
2.9incentive
8.3Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.