Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Aspera Faspex 5 — ibm.com/support/pages/node/7255331 Clear all filters
TI-2025-24764 CVE-2025-36230 · GHSA-rh9m-3jjg-79rv

XSS in IBM Aspera Faspex

Priority LOW 24

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00198 Published 2025-12-26 No fix listed CWE-80
TI-2025-24762 CVE-2025-36228 · GHSA-cqcr-6gvh-8xmg

Incorrect Execution-Assigned Permissions in IBM Aspera Faspex

Priority LOW 17

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, potentially leading to misuse.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.0022 Published 2025-12-26 No fix listed CWE-279