| CVE-2025-36171 |
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
|
4.9
Moyenne
|
9 oct. 2025 |
| CVE-2025-36225 |
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
|
4.3
Moyenne
|
9 oct. 2025 |
| CVE-2023-37401 |
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
|
5.3
Moyenne
|
9 oct. 2025 |
| CVE-2025-36040 |
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Moyenne
|
30 juil. 2025 |
| CVE-2025-36039 |
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Moyenne
|
30 juil. 2025 |
| CVE-2025-33138 |
IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection
|
5.4
Moyenne
|
22 mai 2025 |
| CVE-2025-33137 |
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform…
|
7.1
Élevée
|
22 mai 2025 |
| CVE-2025-33136 |
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform…
|
7.1
Élevée
|
22 mai 2025 |
| CVE-2025-3423 |
IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
13 avr. 2025 |
| CVE-2023-35907 |
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which…
|
5.9
Moyenne
|
29 janv. 2025 |
| CVE-2023-37413 |
IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response…
|
5.3
Moyenne
|
29 janv. 2025 |
| CVE-2023-37398 |
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which…
|
5.9
Moyenne
|
29 janv. 2025 |
| CVE-2023-37412 |
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access…
|
4.4
Moyenne
|
29 janv. 2025 |
| CVE-2023-37395 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper…
|
2.5
Faible
|
11 déc. 2024 |
| CVE-2024-45097 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource…
|
5.9
Moyenne
|
5 sept. 2024 |
| CVE-2024-45096 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information…
|
6.5
Moyenne
|
5 sept. 2024 |
| CVE-2024-45098 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource…
|
6.8
Moyenne
|
5 sept. 2024 |
| CVE-2023-37411 |
IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting
|
4.8
Moyenne
|
28 mai 2024 |
| CVE-2022-40745 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than…
|
5.5
Moyenne
|
19 avr. 2024 |
| CVE-2023-37397 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper…
|
3.6
Faible
|
19 avr. 2024 |
| CVE-2023-27279 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting
|
6.5
Moyenne
|
19 avr. 2024 |
| CVE-2023-37396 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper…
|
2.5
Faible
|
19 avr. 2024 |
| CVE-2023-22869 |
IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a…
|
5.5
Moyenne
|
19 avr. 2024 |
| CVE-2023-37400 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential…
|
7.8
Élevée
|
19 avr. 2024 |
| CVE-2022-22399 |
IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by…
|
5.4
Moyenne
|
5 mars 2024 |