CVE-2025-13459: IBM Aspera Console

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.

Affected products

• IBM Aspera Console: from 3.3.0, before 3.4.9 (fixed in 3.4.9)

Published 2026-03-16. Last modified 2026-06-17.