Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:aspera_faspex:5.0.1:*:*:*:*:*:*:*

part: a version: 5.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAspera Faspex (f566731a-111a-5653-b7fd-cd9d72e3b005)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36040 vulnerable 2026-06-08 07:21:00.581763 IBM Aspera Faspex session fixation
MEDIUM (6.5)
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.
Published: 2025-07-30T23:48:52.209Z
Updated: 2025-07-31T17:55:19.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36039 vulnerable 2026-06-08 07:21:00.571206 IBM Aspera Faspex bypass security
MEDIUM (6.5)
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,
Published: 2025-07-30T23:47:25.483Z
Updated: 2025-07-31T17:55:40.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22399 vulnerable 2026-06-08 05:40:53.714619 IBM Aspera Faspex HTTP header injection
MEDIUM (5.4)
IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 222562.
Published: 2024-03-05T19:58:53.516Z
Updated: 2024-08-03T03:14:54.693Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.