| CVE-2022-40744 |
IBM Aspera Faspex 5.0.6 is vulnerable to stored cross-site scripting
|
4.8
Moyenne
|
2 févr. 2024 |
| CVE-2022-22402 |
IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
8 sept. 2023 |
| CVE-2022-22401 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information
|
5.9
Moyenne
|
8 sept. 2023 |
| CVE-2022-22409 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application,…
|
5.3
Moyenne
|
8 sept. 2023 |
| CVE-2023-30995 |
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist…
|
7.5
Élevée
|
8 sept. 2023 |
| CVE-2023-24965 |
IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
|
5.8
Moyenne
|
8 sept. 2023 |
| CVE-2022-22405 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
|
5.9
Moyenne
|
8 sept. 2023 |
| CVE-2023-35906 |
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls
|
5.3
Moyenne
|
5 sept. 2023 |
| CVE-2023-22870 |
IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in…
|
5.9
Moyenne
|
5 sept. 2023 |
| CVE-2023-27873 |
IBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using…
|
6.5
Moyenne
|
21 mars 2023 |
| CVE-2023-27874 |
IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data
|
9.9
Critique
|
21 mars 2023 |
| CVE-2023-27871 |
IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user,…
|
7.5
Élevée
|
21 mars 2023 |
| CVE-2023-27875 |
IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls
|
7.5
Élevée
|
16 mars 2023 |
| CVE-2023-22868 |
IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
17 févr. 2023 |
| CVE-2022-47986 |
Exploitée
IBM Aspera Faspex Code Execution Vulnerability
|
9.8
Critique
|
17 févr. 2023 |
| CVE-2022-22497 |
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token
|
7.5
Élevée
|
24 mai 2022 |