Aspera Faspex
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_faspex:5.0.0.0:*:*:*:*:*:*:*
part: a version: 5.0.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Faspex (f566731a-111a-5653-b7fd-cd9d72e3b005) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36225 |
vulnerable | 2026-06-08 07:21:01.471406 |
IBM Aspera Faspex information disclosure
MEDIUM (4.3)
IBM Aspera 5.0.0 through 5.0.13.1
could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
Published: 2025-10-09T13:56:19.270Z
Updated: 2025-10-09T14:43:28.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36171 |
vulnerable | 2026-06-08 07:21:01.338392 |
IBM Aspera Faspex denial of service
MEDIUM (4.9)
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.
Published: 2025-10-09T13:57:51.884Z
Updated: 2025-10-09T14:15:08.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37401 |
vulnerable | 2026-06-08 06:08:15.235566 |
IBM Aspera Faspex cross-origin resource sharing
MEDIUM (5.3)
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.
Published: 2025-10-09T13:54:38.846Z
Updated: 2025-10-09T19:06:07.254Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.