aspera_http_gateway vulnerabilities

CVEs whose affected-version data names the aspera_http_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-36274High· 7.5

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.

▾ Twilightibm · aspera_http_gatewayEPSS 0.21%via NVD

aspera_http_gateway vulnerabilities (CVEs) · VulnSea