5.4
Moyenne
CVE-2022-22399 IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by…
Description
IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 222562.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aspera Faspex | Versions non publiées |
Autres CVE de Aspera Faspex
Les 41 CVE de Aspera Faspex →
CVE-2025-36171
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
4.9
Moyenne
CVE-2025-36225
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
4.3
Moyenne
CVE-2023-37401
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
5.3
Moyenne
CVE-2025-36040
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
6.5
Moyenne