PT-2026-29645 · Ibm · Ibm Aspera Shares

Published 2026-04-01 · Updated 2026-04-02 · CVE-2025-66487

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Aspera Shares versions 1.9.9 through 1.11.0

Description IBM Aspera Shares versions 1.9.9 through 1.11.0 do not properly limit the rate at which authenticated users can send emails, potentially leading to email flooding or a denial of service.

Recommendations Update to a version later than 1.11.0.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-66487

Affected Products

Ibm Aspera Shares

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-66487 · Security Note
• https://twitter.com/CVEnew/status/2039647725256638761 · Twitter Post
• https://ibm.com/support/pages/node/7267848 · Vendor Advisory, Patch