| CVE-2026-14958 |
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due…
|
9.1
Critical
|
Jul 28, 2026 |
| CVE-2026-14959 |
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due…
|
9.1
Critical
|
Jul 28, 2026 |
| CVE-2026-14996 |
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management
|
8.2
High
|
Jul 28, 2026 |
| CVE-2025-36226 |
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 10, 2026 |
| CVE-2025-36227 |
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Medium
|
Mar 10, 2026 |
| CVE-2025-36230 |
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection
|
5.4
Medium
|
Dec 26, 2025 |
| CVE-2025-36229 |
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data…
|
3.1
Low
|
Dec 26, 2025 |
| CVE-2025-36228 |
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API…
|
3.8
Low
|
Dec 26, 2025 |