4.3
Medium
CVE-2025-36225 IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
Description
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Faspex 5.0 | 5.0.0 → 5.0.13.1 | No fix stated |
Other CVEs of Aspera Faspex
The 41 CVEs of Aspera Faspex →
CVE-2025-36171
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
4.9
Medium
CVE-2023-37401
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
5.3
Medium
CVE-2025-36040
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
6.5
Medium
CVE-2025-36039
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
6.5
Medium