Denial of Service Vulnerability in IBM Aspera Console
CVE-2025-13212

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Aspera Console
Vendor
CVE Published:
13 March 2026

What is CVE-2025-13212?

A vulnerability in IBM Aspera Console versions 3.3.0 through 3.4.8 allows an authenticated user to create a denial of service condition in the email service due to inadequate management of interaction frequency. This can potentially lead to service disruptions, affecting user operations and communication channels within the application. Immediate attention is advised to implement necessary patches or workarounds to mitigate the risks associated with this vulnerability.

Affected Version(s)

Aspera Console 3.3.0 <= 3.4.8

References

https://www.ibm.com/support/pages/node/7263486
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.