CVE-2026-75076

Received Received - Intake

Exposure of JavaScript Source Maps in IBM Aspera Enterprise WebApps

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-75076

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Aspera	Enterprise WebApps 1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 exposing JavaScript source map files. These files can reveal sensitive information such as original source code, internal paths, or configuration details, potentially aiding attackers in crafting exploits.

Detection Guidance

Check for exposed JavaScript source map files in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6. Inspect web server directories for files ending in .map or similar patterns. Use commands like 'find /path/to/webroot -name "*.map"' to locate them.

Impact Analysis

An attacker could exploit this to gain insights into the application's internal workings, leading to further attacks like unauthorized access or data breaches. The impact is limited to information disclosure, with no direct code execution or system compromise.

Mitigation Strategies

Remove or restrict access to exposed JavaScript source map files. Update IBM Aspera Enterprise WebApps to the latest version if available. Ensure proper access controls are in place to prevent unauthorized access to sensitive files.

Hi! I’m here to help you understand CVE-2026-75076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70