Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:aspera_faspex:5.0.10:*:*:*:*:*:*:*

part: a version: 5.0.10 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAspera Faspex (f566731a-111a-5653-b7fd-cd9d72e3b005)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37413 vulnerable 2026-06-08 06:08:15.273411 IBM Aspera Faspex information disclosure
MEDIUM (5.3)
IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy.
Published: 2025-01-29T16:36:24.872Z
Updated: 2025-02-12T16:39:51.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37412 vulnerable 2026-06-08 06:08:15.263885 IBM Aspera Faspex improper access control
MEDIUM (4.4)
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls.
Published: 2025-01-29T16:34:55.809Z
Updated: 2025-02-12T16:48:00.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37398 vulnerable 2026-06-08 06:08:15.233180 IBM Aspera Faspex information disclosure
MEDIUM (5.9)
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Published: 2025-01-29T16:35:45.779Z
Updated: 2025-02-12T16:47:19.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35907 vulnerable 2026-06-08 06:06:28.114998 IBM Aspera Faspex information disclosure
MEDIUM (5.9)
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Published: 2025-01-29T16:37:06.966Z
Updated: 2025-02-12T16:47:02.895Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.