AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-13214

HIGH · CVSS 7.6 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-11 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.6. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2025-13214
Severity
HIGH
CVSS
7.6
EPSS
0.33%

Original NVD Description

IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Related CVEs

Other vulnerabilities affecting the same vendor(s)