5.4
Moyenne
CVE-2025-36227 IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of…
Description
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aspera Faspex 5 5.0 | 5.0.0 → 5.0.14.3 | Pas de correctif indiqué |
Autres CVE de Aspera Faspex 5
Les 8 CVE de Aspera Faspex 5 →
CVE-2026-14958
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due…
9.1
Critique
CVE-2026-14959
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due…
9.1
Critique
CVE-2026-14996
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management
8.2
Élevée
CVE-2025-36226
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting
5.4
Moyenne