Security Advisory

CVE-2025-13219

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-10 20:08:20

Last updated 2026-03-11 14:09:47

Assigner ibm

CVSS score 5.9

State PUBLISHED

Description

IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

← Browse all CVEs View on cve.org ↗