PT-2026-29644 · Ibm · Ibm Aspera Shares

CVE-2025-66486 · Published 2026-04-01 · Updated 2026-04-02

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Shares versions 1.9.9 through 1.11.0

Description IBM Aspera Shares versions 1.9.9 through 1.11.0 are susceptible to HTML injection. A remote attacker can inject malicious HTML code that, when viewed, executes within the victim's web browser, operating within the security context of the hosting site.

Recommendations Update IBM Aspera Shares to a version later than 1.11.0.

Fix

XSS

Weakness Enumeration

CWE-80

Related Identifiers

CVE-2025-66486

Affected Products

Ibm Aspera Shares

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-66486 · Security Note
• https://ibm.com/support/pages/node/7267848 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/2039647726410010952 · Twitter Post