Advisories · Technology

IBM Aspera Faspex.

Every CVE that names IBM Aspera Faspex among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36171 CVE record

CVSS 4.9 Medium

IBM Aspera Faspex denial of service
- IBM Aspera Faspex
- Denial of service
Not analysed yet 9 Oct 2025
CVE-2025-36225 CVE record

CVSS 4.3 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Information disclosure
Not analysed yet 9 Oct 2025
CVE-2023-37401 CVE record

CVSS 5.3 Medium

IBM Aspera Faspex cross-origin resource sharing
- IBM Aspera Faspex
- CWE-942
Not analysed yet 9 Oct 2025
CVE-2025-36040 CVE record

CVSS 6.5 Medium

IBM Aspera Faspex session fixation
- IBM Aspera Faspex
- Authentication bypass
Not analysed yet 30 Jul 2025
CVE-2025-36039 CVE record

CVSS 6.5 Medium

IBM Aspera Faspex bypass security
- IBM Aspera Faspex
- CWE-602
Not analysed yet 30 Jul 2025
CVE-2025-33138 CVE record

CVSS 5.4 Medium

IBM Aspera Faspex HTML injection
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 22 May 2025
CVE-2025-33137 CVE record

CVSS 7.1 High

IBM Aspera Faspex data modification
- IBM Aspera Faspex
- CWE-602
Not analysed yet 22 May 2025
CVE-2025-33136 CVE record

CVSS 7.1 High

IBM Aspera Faspex data modification
- IBM Aspera Faspex
- CWE-471
Not analysed yet 22 May 2025
CVE-2025-3423 CVE record

CVSS 5.4 Medium

IBM Aspera Faspex 5 cross-site scripting
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 13 Apr 2025
CVE-2023-35907 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Hard-coded credentials
Not analysed yet 29 Jan 2025
CVE-2023-37413 CVE record

CVSS 5.3 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- CWE-204
Not analysed yet 29 Jan 2025
CVE-2023-37398 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Hard-coded credentials
Not analysed yet 29 Jan 2025
CVE-2023-37412 CVE record

CVSS 4.4 Medium

IBM Aspera Faspex improper access control
- IBM Aspera Faspex
- Privilege escalation
Not analysed yet 29 Jan 2025
CVE-2023-37395 CVE record

CVSS 2.5 Low

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 11 Dec 2024
CVE-2024-45097 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex bypass security
- IBM Aspera Faspex
- CWE-650
Not analysed yet 5 Sept 2024
CVE-2024-45096 CVE record

CVSS 6.5 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- CWE-548
Not analysed yet 5 Sept 2024
CVE-2024-45098 CVE record

CVSS 6.8 Medium

IBM Aspera Faspex bypass security
- IBM Aspera Faspex
- CWE-650
Not analysed yet 5 Sept 2024
CVE-2023-37411 CVE record

CVSS 4.8 Medium

IBM Aspera Faspex cross-site scripting
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 28 May 2024
CVE-2022-40745 CVE record

CVSS 5.5 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 19 Apr 2024
CVE-2023-37397 CVE record

CVSS 3.6 Low

IBM Aspera Faspex data manipulation
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 19 Apr 2024
CVE-2023-27279 CVE record

CVSS 6.5 Medium

IBM Aspera Faspex denial of service
- IBM Aspera Faspex
- CWE-799
Not analysed yet 19 Apr 2024
CVE-2023-37396 CVE record

CVSS 2.5 Low

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 19 Apr 2024
CVE-2023-22869 CVE record

CVSS 5.5 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Information disclosure
Not analysed yet 19 Apr 2024
CVE-2023-37400 CVE record

CVSS 7.8 High

IBM Aspera Faspex privilege escalation
- IBM Aspera Faspex
- Hard-coded credentials
Not analysed yet 19 Apr 2024
CVE-2022-22399 CVE record

CVSS 5.4 Medium

IBM Aspera Faspex HTTP header injection
- IBM Aspera Faspex
- CWE-644
Not analysed yet 5 Mar 2024
CVE-2022-40744 CVE record

CVSS 4.8 Medium

IBM Aspera Faspex cross-site scripting
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2024
CVE-2022-22402 CVE record

CVSS 5.4 Medium

IBM Aspera Faspex cross-site scripting
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2023
CVE-2022-22401 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
Not analysed yet 8 Sept 2023
CVE-2022-22409 CVE record

CVSS 5.3 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Information disclosure
Not analysed yet 8 Sept 2023
CVE-2023-30995 CVE record

CVSS 7.5 High

IBM Aspera Faspex improper access control
- IBM Aspera Faspex
Not analysed yet 8 Sept 2023
CVE-2023-24965 CVE record

CVSS 5.8 Medium

IBM Aspera Faspex improper access control
- IBM Aspera Faspex
Not analysed yet 8 Sept 2023
CVE-2022-22405 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 8 Sept 2023
CVE-2023-35906 CVE record

CVSS 5.3 Medium

IBM Aspera Faspex security bypass
- IBM Aspera Faspex
- CWE-291
Not analysed yet 5 Sept 2023
CVE-2023-22870 CVE record

CVSS 5.9 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- Weak cryptography or TLS
Not analysed yet 5 Sept 2023
CVE-2023-27873 CVE record

CVSS 6.5 Medium

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
Not analysed yet 21 Mar 2023
CVE-2023-27874 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

IBM Aspera Faspex XML external entity injection
- IBM Aspera Faspex
- XML external entities (XXE)
Not analysed yet 21 Mar 2023
CVE-2023-27871 CVE record

CVSS 7.5 High

IBM Aspera Faspex information disclosure
- IBM Aspera Faspex
- SQL injection
Not analysed yet 21 Mar 2023
CVE-2023-27875 CVE record

CVSS 7.5 High

IBM Aspera Faspex improper access controls
- IBM Aspera Faspex
- Broken access control
Not analysed yet 16 Mar 2023
CVE-2023-22868 CVE record

CVSS 5.4 Medium

IBM Aspera Faspex cross-site scripting
- IBM Aspera Faspex
- Cross-site scripting (XSS)
Not analysed yet 17 Feb 2023
CVE-2022-47986 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

IBM Aspera Faspex code execution
- IBM Aspera Faspex
- Insecure deserialization
Not analysed yet 17 Feb 2023
CVE-2022-22497 CVE record

CVSS 7.5 High

IBM Aspera Faspex: IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly…
- IBM Aspera Faspex
Not analysed yet 24 May 2022