Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Aspera Faspex — ibm.com/support/pages/node/7234114 Clear all filters
TI-2025-24108 CVE-2025-33138 · GHSA-26fm-jh3j-2ww5

IBM Aspera Faspex HTML injection

Priority LOW 27

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00274 Published 2025-05-22 No fix listed CWE-80
TI-2025-24107 CVE-2025-33137 · GHSA-w6gx-hfp5-rmhr

IBM Aspera Faspex data modification

Priority LOW 38

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0036 Published 2025-05-22 No fix listed CWE-602
TI-2025-24106 CVE-2025-33136 · GHSA-3wc3-w43j-x6wh

IBM Aspera Faspex data modification

Priority LOW 38

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0036 Published 2025-05-22 No fix listed CWE-471