Ibm

Aspera Faspex

41 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2025-36171

  • EPSS 0.06%
  • Veröffentlicht 09.10.2025 14:15:54
  • Zuletzt bearbeitet 14.10.2025 20:18:22

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.

4.3

CVE-2025-36225

  • EPSS 0.03%
  • Veröffentlicht 09.10.2025 13:56:19
  • Zuletzt bearbeitet 14.10.2025 20:18:48

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

5.3

CVE-2023-37401

  • EPSS 0.04%
  • Veröffentlicht 09.10.2025 13:54:38
  • Zuletzt bearbeitet 14.10.2025 20:18:35

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.

6.5

CVE-2025-36040

  • EPSS 0.05%
  • Veröffentlicht 30.07.2025 23:48:52
  • Zuletzt bearbeitet 06.08.2025 16:53:32

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.

6.5

CVE-2025-36039

  • EPSS 0.06%
  • Veröffentlicht 30.07.2025 23:47:25
  • Zuletzt bearbeitet 06.08.2025 16:54:00

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,

6.1

CVE-2025-33138

  • EPSS 0.02%
  • Veröffentlicht 22.05.2025 16:37:28
  • Zuletzt bearbeitet 30.05.2025 01:19:08

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

8.8

CVE-2025-33137

  • EPSS 0.03%
  • Veröffentlicht 22.05.2025 16:36:04
  • Zuletzt bearbeitet 30.05.2025 01:19:24

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.

8.8

CVE-2025-33136

  • EPSS 0.04%
  • Veröffentlicht 22.05.2025 16:14:02
  • Zuletzt bearbeitet 30.05.2025 01:19:40

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.

5.4

CVE-2025-3423

  • EPSS 0.02%
  • Veröffentlicht 13.04.2025 11:56:15
  • Zuletzt bearbeitet 18.07.2025 18:07:10

IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

5.3

CVE-2023-37413

  • EPSS 0.08%
  • Veröffentlicht 29.01.2025 17:15:26
  • Zuletzt bearbeitet 04.03.2025 21:43:48

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy.