Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Aspera Faspex — ibm.com/support/pages/node/6964694 Clear all filters
TI-2023-12469 CVE-2023-27873 · GHSA-5p2m-4x7j-7867

IBM Aspera Faspex information disclosure

Priority LOW 30

IBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2023-03-21 No fix listed
TI-2023-12470 CVE-2023-27874 · GHSA-g822-3v64-2vpm

IBM Aspera Faspex XML external entity injection

Priority MEDIUM 46

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01343 Published 2023-03-21 No fix listed CWE-611
TI-2023-12468 CVE-2023-27871 · GHSA-wq4v-jc7c-r7pj

IBM Aspera Faspex information disclosure

Priority MEDIUM 41

IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00903 Published 2023-03-21 No fix listed CWE-89