| CVE-2025-36171 |
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
|
4.9
Medium
|
Oct 9, 2025 |
| CVE-2025-36225 |
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
|
4.3
Medium
|
Oct 9, 2025 |
| CVE-2023-37401 |
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
|
5.3
Medium
|
Oct 9, 2025 |
| CVE-2025-36040 |
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Medium
|
Jul 30, 2025 |
| CVE-2025-36039 |
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Medium
|
Jul 30, 2025 |
| CVE-2025-33138 |
IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection
|
5.4
Medium
|
May 22, 2025 |
| CVE-2025-33137 |
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform…
|
7.1
High
|
May 22, 2025 |
| CVE-2025-33136 |
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform…
|
7.1
High
|
May 22, 2025 |
| CVE-2025-3423 |
IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 13, 2025 |
| CVE-2023-35907 |
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which…
|
5.9
Medium
|
Jan 29, 2025 |
| CVE-2023-37413 |
IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response…
|
5.3
Medium
|
Jan 29, 2025 |
| CVE-2023-37398 |
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which…
|
5.9
Medium
|
Jan 29, 2025 |
| CVE-2023-37412 |
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access…
|
4.4
Medium
|
Jan 29, 2025 |
| CVE-2023-37395 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper…
|
2.5
Low
|
Dec 11, 2024 |
| CVE-2024-45097 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource…
|
5.9
Medium
|
Sep 5, 2024 |
| CVE-2024-45096 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information…
|
6.5
Medium
|
Sep 5, 2024 |
| CVE-2024-45098 |
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource…
|
6.8
Medium
|
Sep 5, 2024 |
| CVE-2023-37411 |
IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting
|
4.8
Medium
|
May 28, 2024 |
| CVE-2022-40745 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than…
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2023-37397 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper…
|
3.6
Low
|
Apr 19, 2024 |
| CVE-2023-27279 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting
|
6.5
Medium
|
Apr 19, 2024 |
| CVE-2023-37396 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper…
|
2.5
Low
|
Apr 19, 2024 |
| CVE-2023-22869 |
IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a…
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2023-37400 |
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential…
|
7.8
High
|
Apr 19, 2024 |
| CVE-2022-22399 |
IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by…
|
5.4
Medium
|
Mar 5, 2024 |