CVE-2025-13460CWE-204

IBM Aspera Console Information Disclosure

Medium · published March 13, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2026-03-13T19:54Z
EPSS history
Timeline
  • 13 MAR 19:54Z
    IBM Aspera Console Information Disclosure
    cvelistv5