CVE-2025-0162— IBM Aspera Shares XML external entity injection

Quick assessment

Copy summary Copy citation

Affected

IBM Aspera Shares

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

IBM Aspera Shares是美国国际商业机器（IBM）公司的一个 Web 应用程序。 IBM Aspera Shares 1.9.9至1.10.0 PL7版本存在代码问题漏洞，该漏洞源于XML外部实体注入，可能导致远程认证攻击者暴露敏感信息或消耗内存资源。

CVE-2025-0162 affects IBM Aspera Shares. No confirmed in-the-wild exploitation; assess based on exposure. IBM Aspera Shares是美国国际商业机器（IBM）公司的一个 Web 应用程序。 IBM Aspera Shares 1.9.9至1.10.0 PL7版本存在代码问题漏洞，该漏洞源于XML外部实体注入，可能导致远程认证攻击者暴露敏感信息或消耗内存资源。 CVE-2025-0162 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2025-0162

I. Basic Information for CVE-2025-0162

Affected Products

II. Public POCs for CVE-2025-0162

III. Intelligence Information for CVE-2025-0162

Vendor Advisories for CVE-2025-0162 (1)

• Security Bulletin: IBM Aspera Shares is vulnerable to bypass security restrictions and an external entity injection (CVE-2024-45409, CVE-2025-0162) vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2025-0162

Same Patch Batch · IBM · 2025-03-07 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2025-0162