CVE-2025-13379Disclosure(ibm / aspera_console)

LOWCVSS 8.6 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

ibm CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ibm.com/support/pages/node/7259448

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

aspera_console

Threat summary

4 mentions across 1 observed day

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
4 total mentions across 1 day

Affected systems

Vendors

ibm

Products

aspera_console

Deep dive

Activity timeline4 mentions / 1d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

CVEFind.com@CveFindCom247d
Disclosure
[CVE-2025-13379: HIGH] Critical SQL injection vulnerability discovered in IBM Aspera Console 3.4.0 - 3.4.8. Attackers can execute malicious queries, compromising database integrity.#cve,CVE-2025-13379,#cybersecurity https://cvefind.com/CVE-2025-13379
Post summary
IBM Aspera Console versions 3.4.0-3.4.8 are vulnerable to a critical SQL injection that can compromise database integrity. No patch, PoC, or exploit details are provided.
0001097
583 followersView on X
CVE@CVEnew247d
Disclosure
CVE-2025-13379 IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker t… https://www.cve.org/CVERecord?id=CVE-2025-13379
Post summary
The text reports that IBM Aspera Console versions 3.4.0 through 3.4.8 are vulnerable to SQL injection, allowing remote attackers to send crafted SQL statements.
00010247
56.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds247d
Disclosure
CVE-2025-13379 SQL Injection Vulnerability in IBM Aspera Console 3.4.0 Through 3.4.8 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13379
Post summary
A SQL injection vulnerability (CVE‑2025‑13379) affecting IBM Aspera Console versions 3.4.0–3.4.8 has been disclosed.
0000061
4.0K followersView on X
The Hacker Wire@TheHackerWire247d
Disclosure
🟠 CVE-2025-13379 - High IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or d... https://www.thehackerwire.com/vulnerability/CVE-2025-13379/ https://t.co/YlaOZQU0BW
Post summary
The post announces a new SQL injection vulnerability in IBM Aspera Console (v3.4.0–3.4.8), detailing the affected versions and potential impact, with no mention of PoC, exploit, active exploitation, or patch.
0000056
113 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ibm	aspera_console	-	-	-

Explore more

Back to dashboard ibm CVEs aspera_console vulnerabilities

What researchers are saying

CVE-2025-13379

CVEFind.com@CveFindComDisclosure

IBM Aspera Console versions 3.4.0-3.4.8 are vulnerable to a critical SQL injection that can compromise database integrity. No patch, PoC, or exploit details are provided.

CVE@CVEnewDisclosure

The text reports that IBM Aspera Console versions 3.4.0 through 3.4.8 are vulnerable to SQL injection, allowing remote attackers to send crafted SQL statements.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A SQL injection vulnerability (CVE‑2025‑13379) affecting IBM Aspera Console versions 3.4.0–3.4.8 has been disclosed.

The Hacker Wire@TheHackerWireDisclosure

The post announces a new SQL injection vulnerability in IBM Aspera Console (v3.4.0–3.4.8), detailing the affected versions and potential impact, with no mention of PoC, exploit, active exploitation, or patch.