Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: IBM Aspera Faspex — ibm.com/support/pages/node/7029681 Clear all filters
TI-2022-06711 CVE-2022-22402 · GHSA-gg3r-rxp2-7j96

IBM Aspera Faspex cross-site scripting

Priority LOW 24

IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00365 Published 2023-09-08 No fix listed CWE-79
TI-2022-06710 CVE-2022-22401 · GHSA-4wmx-cmmv-6398

IBM Aspera Faspex information disclosure

Priority LOW 34

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00549 Published 2023-09-08 No fix listed CWE-311
TI-2022-06714 CVE-2022-22409 · GHSA-h7f5-2cf3-6cf2

IBM Aspera Faspex information disclosure

Priority LOW 32

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused by an insecure configuration.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00819 Published 2023-09-08 No fix listed CWE-200
TI-2023-14733 CVE-2023-30995 · GHSA-v856-jmj2-xmv3

IBM Aspera Faspex improper access control

Priority MEDIUM 41

IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0091 Published 2023-09-08 No fix listed CWE-863
TI-2023-10446 CVE-2023-24965 · GHSA-4pfg-7qf4-p79c

IBM Aspera Faspex improper access control

Priority LOW 33

IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00518 Published 2023-09-08 No fix listed CWE-668
TI-2022-06713 CVE-2022-22405 · GHSA-qx6q-qj4h-vgrq

IBM Aspera Faspex information disclosure

Priority LOW 27

IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00503 Published 2023-09-08 No fix listed CWE-311
TI-2023-17971 CVE-2023-35906 · GHSA-98gc-8mj5-cc3r

IBM Aspera Faspex security bypass

Priority LOW 39

IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2023-09-05 No fix listed CWE-291
TI-2023-09018 CVE-2023-22870 · GHSA-x6h4-v5ww-9rw2

IBM Aspera Faspex information disclosure

Priority LOW 26

IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00343 Published 2023-09-05 No fix listed CWE-319