CVE-2025-13460

CVSS Score & Metrics

Base Score

5.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N                                    

IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.

Published Date

March 16, 2026

Last Modified

March 17, 2026

CWE ID

CWE-204

Source

NVD

Vendor

IBM

Product

Aspera Console