Ibm Aspera High-speed Transfer Server — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Aspera High-speed Transfer Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2026-8175 — CVSS 9.8 (critical): IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix…
• CVE-2026-8179 — CVSS 8.8 (high): IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix…
• CVE-2020-4434 — CVSS 7.5 (high): Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could…
• CVE-2020-4435 — CVSS 7.5 (high): Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an…
• CVE-2026-8180 — CVSS 7.5 (high): IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix…
• CVE-2020-4432 — CVSS 7.5 (high): Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate…
• CVE-2020-4436 — CVSS 7.5 (high): Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate…
• CVE-2020-4433 — CVSS 7.5 (high): Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a…
• CVE-2026-9035 — CVSS 6.5 (medium): IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix…
• CVE-2022-22391 — CVSS 4.3 (medium): IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating…