IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.