Aspera Faspex 5
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_faspex_5:5.0.0:*:*:*:*:*:*:*
part: a version: 5.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Faspex 5 (a34d5c41-58a8-50ff-b0ef-cc74523b33f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14996 |
vulnerable | 2026-09-16 04:33:12.213817 |
Multiple vulnerabilities in IBM Aspera Faspex
HIGH (8.2)
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
Published: 2026-07-28T20:21:18.798Z
Updated: 2026-07-29T14:10:07.644Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14958 |
vulnerable | 2026-09-16 04:33:12.040438 |
OS command injection in IBM Aspera Faspex
CRITICAL (9.1)
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.
Published: 2026-07-28T20:36:05.337Z
Updated: 2026-07-30T03:55:26.302Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14959 |
vulnerable | 2026-09-16 04:33:11.506388 |
OS Command Injection in IBM Aspera Faspex
CRITICAL (9.1)
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.
Published: 2026-07-28T20:33:51.198Z
Updated: 2026-07-30T03:55:27.073Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36230 |
vulnerable | 2026-06-08 07:21:01.481199 |
XSS in IBM Aspera Faspex
MEDIUM (5.4)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2025-12-26T14:22:46.035Z
Updated: 2025-12-26T15:14:53.108Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36229 |
vulnerable | 2026-06-08 07:21:01.480763 |
Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex
LOW (3.1)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enumerating package identifiers.
Published: 2025-12-26T14:15:03.417Z
Updated: 2025-12-26T15:14:58.269Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36228 |
vulnerable | 2026-06-08 07:21:01.478275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36227 |
vulnerable | 2026-06-08 07:21:01.477715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36226 |
vulnerable | 2026-06-08 07:21:01.476044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.