Skip to content
Sign in
5.4 Medium

CVE-2022-22399 IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by…

Description

IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 222562.

Affected products and versions

Product Affected versions Fixed in
Aspera Faspex Versions not published

Other CVEs of Aspera Faspex

The 41 CVEs of Aspera Faspex →
CVE-2025-36171 IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly… 4.9 Medium CVE-2025-36225 IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user… 4.3 Medium CVE-2023-37401 IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be… 5.3 Medium CVE-2025-36040 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to… 6.5 Medium
Track this CVE