IBM Aspera Faspex 5.0.12
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_faspex:5.0.12:*:*:*:*:*:*:*
part: a version: 5.0.12 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Faspex (f566731a-111a-5653-b7fd-cd9d72e3b005) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36040 |
vulnerable | 2026-06-08 07:21:00.582457 |
IBM Aspera Faspex session fixation
MEDIUM (6.5)
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.
Published: 2025-07-30T23:48:52.209Z
Updated: 2025-07-31T17:55:19.229Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36039 |
vulnerable | 2026-06-08 07:21:00.578693 |
IBM Aspera Faspex bypass security
MEDIUM (6.5)
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,
Published: 2025-07-30T23:47:25.483Z
Updated: 2025-07-31T17:55:40.360Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33138 |
vulnerable | 2026-06-08 07:19:01.854923 |
IBM Aspera Faspex HTML injection
MEDIUM (5.4)
IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2025-05-22T16:37:28.698Z
Updated: 2025-08-26T15:04:09.662Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33137 |
vulnerable | 2026-06-08 07:19:01.854545 |
IBM Aspera Faspex data modification
HIGH (7.1)
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.
Published: 2025-05-22T16:36:04.256Z
Updated: 2025-08-26T15:05:04.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33136 |
vulnerable | 2026-06-08 07:19:01.853099 |
IBM Aspera Faspex data modification
HIGH (7.1)
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.
Published: 2025-05-22T16:14:02.649Z
Updated: 2025-08-26T15:04:47.668Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.