| CVE-2022-40745 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than…
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2023-37397 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper…
|
3.6
Low
|
Apr 19, 2024 |
| CVE-2023-27279 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting
|
6.5
Medium
|
Apr 19, 2024 |
| CVE-2023-22869 |
IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a…
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2023-37400 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential…
|
7.8
High
|
Apr 19, 2024 |
| CVE-2022-22409 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application,…
|
5.3
Medium
|
Sep 8, 2023 |
| CVE-2023-30995 |
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist…
|
7.5
High
|
Sep 8, 2023 |
| CVE-2023-24965 |
IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
|
5.8
Medium
|
Sep 8, 2023 |
| CVE-2023-35906 |
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls
|
5.3
Medium
|
Sep 5, 2023 |