CVE-2025-66487CWE-770denial-of-service

CVE-2025-66487

Low · published April 2, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-04-02T03:17Z
Affected products (1)
ProductVersionsFixed in
ibm/aspera_shares≥ 1.9.9, < 1.11.11.11.1
References (1)
https://www.ibm.com/support/pages/node/7267848 · [email protected]
EPSS history
Timeline
  • 01 APR 23:04Z
    Multiple vulnerabilities have been addressed in IBM Aspera Shares
    cvelistv5