CVE-2025-13219 — Multiple vulnerabilities in IBM Aspera Orchestrator
IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the UR…
Published: 2026-03-10 · CVSS: 5.9 · CVSS 3.1
IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7