CVE-2025-13212 MEDIUM

CVE-2025-13212: IBM Aspera Console Denial of Service

Vendor Ibm

Product Aspera Console

Weakness CWE-799

Published March 13, 2026

Last update March 16, 2026

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Key dates

02Disclosure timeline

March 13, 2026 CVE published

March 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-13212 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/799.html AskarLabs — CWE-799 write-up Improper Control of Interaction Frequency

Related vulnerabilities

04Related CVE

CVE-2023-40673 WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability CVE-2024-13274 Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038 CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability CVE-2023-51544 WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability CVE-2024-24873 WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability