Skip to content
Sign in
5.4 Medium

CVE-2025-33138 IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection

Description

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Affected products and versions

Product Affected versions Fixed in
Aspera Faspex 5.0 5.0.0 → 5.0.12 No fix stated

Other CVEs of Aspera Faspex

The 41 CVEs of Aspera Faspex →
CVE-2025-36171 IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly… 4.9 Medium CVE-2025-36225 IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user… 4.3 Medium CVE-2023-37401 IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be… 5.3 Medium CVE-2025-36040 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to… 6.5 Medium
Track this CVE