XML External Entity Injection Vulnerability in IBM Aspera Shares

CVE-2025-0162

Summary

IBM Aspera Shares versions 1.9.9 through 1.10.0 PL7 are susceptible to an XML external entity injection (XXE) attack. This arises when the software processes XML data, potentially allowing remote authenticated attackers to exploit the vulnerability, resulting in exposure of sensitive information or resource exhaustion. Organizations using these versions should be aware of the implications of this vulnerability and take appropriate measures to safeguard their data.

References