CVE-2025-13211 MEDIUM

CVE-2025-13211: IBM Aspera Orchestrator Denial of Service

Vendor Ibm

Product Aspera Orchestrator

Weakness CWE-799

Published December 11, 2025

Last update December 11, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Key dates

02Disclosure timeline

December 11, 2025 CVE published

December 11, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-13211 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/799.html AskarLabs — CWE-799 write-up Improper Control of Interaction Frequency

Related vulnerabilities

04Related CVE

CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability CVE-2023-51544 WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability CVE-2024-24873 WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability CVE-2023-40673 WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability CVE-2024-13274 Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038