CVE-2025-66487

LOW

2.7

Description

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

Details CVE

Score CVSS v3.12.7

SeveriteLOW

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie4/1/2026

Derniere modification4/3/2026

Sourcenvd

Observations honeypot0

Produits affectes

ibm:aspera_shares

Faiblesses (CWE)

CWE-770

References

https://www.ibm.com/support/pages/node/7267848(psirt@us.ibm.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.