CVE-2025-13211

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Dec 11, 2025

CISA due date

—

The record

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Affected packages

Ecosystem	Package	Introduced	Fixed