Skip to main content
Threat Radar animated logo

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/ibm/aspera-orchestrator

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2025-13213: CWE-644 Improper Neutralization of HTTP Headers for Scripting Syntax in IBM Aspera OrchestratorCVE-2025-13213
0

IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking

MediumVulnerabilityUnited StatesUnited StatesGermanyGermanyUnited KingdomUnited Kingdom+7#cve#cve-2025-13213#cwe-644
Join the discussion
CVE-2025-13214: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in IBM Aspera OrchestratorCVE-2025-13214
0

IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

HighVulnerabilityGermanyGermanyUnited KingdomUnited KingdomFranceFrance+5#cve#cve-2025-13214#cwe-89
Join the discussion
CVE-2025-13148: CWE-620 Unverified Password Change in IBM Aspera OrchestratorCVE-2025-13148
0

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.

HighVulnerabilityGermanyGermanyUnited KingdomUnited KingdomFranceFrance+5#cve#cve-2025-13148#cwe-620
Join the discussion
CVE-2025-13481: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in IBM Aspera OrchestratorCVE-2025-13481
0

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

HighVulnerabilityGermanyGermanyUnited KingdomUnited KingdomFranceFrance+5#cve#cve-2025-13481#cwe-78
Join the discussion

Showing 1 to 4 of 4 results

Filters:Package: pkg:github/ibm/aspera-orchestrator
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses