CVE-2025-13219

7.5 highEPSS 0.4%

High (7.5) in ibm aspera orchestrator. EPSS 0.4% chance of exploitation in the next 30 days.

IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-598
Published: 2026-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:aspera_orchestrator

References

https://www.ibm.com/support/pages/node/7263083

Check your stack JSON