An attacker can cause a denial of service by exploiting uncontrolled resource consumption within IBM Aspera Enterprise WebApps. The vulnerability allows an adversary to manipulate the server to consume excessive resources, leading to service unavailability. The weakness is classified as CWE-400, indicating that the application fails to restrict resource usage appropriately.

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected. Users running any of these releases should be aware that the web applications may become inoperative when subjected to resource exhaustion attacks.

The CVSS score of 7.5 reflects a moderate-high severity for this denial of service vulnerability. The EPSS score is unavailable, so the exploitation probability is unknown; however, the nature of the flaw—uncontrolled consumption—suggests that a remote attacker could trigger it by sending crafted requests over the network. The vulnerability is not listed in CISA KEV, indicating no confirmed exploitation reports. An attacker could exploit this by remotely accessing the web application, causing resource exhaustion, and rendering the service unusable.