CVE-2020-4545: IBM Aspera Connect

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190.

Affected products

• IBM Aspera Connect: up to and including 3.9.9

Published 2020-09-04. Last modified 2026-06-17.