Aspera Faspex 5
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:aspera_faspex_5:5.0.0:*:*:*:*:*:*:*
part: a version: 5.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Aspera Faspex 5 (a34d5c41-58a8-50ff-b0ef-cc74523b33f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36230 |
vulnerable | 2026-06-08 07:21:01.481199 |
XSS in IBM Aspera Faspex
MEDIUM (5.4)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2025-12-26T14:22:46.035Z
Updated: 2025-12-26T15:14:53.108Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36229 |
vulnerable | 2026-06-08 07:21:01.480763 |
Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex
LOW (3.1)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enumerating package identifiers.
Published: 2025-12-26T14:15:03.417Z
Updated: 2025-12-26T15:14:58.269Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36228 |
vulnerable | 2026-06-08 07:21:01.478275 |
Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
LOW (3.8)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, potentially leading to misuse.
Published: 2025-12-26T14:11:45.492Z
Updated: 2025-12-26T15:15:06.304Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36227 |
vulnerable | 2026-06-08 07:21:01.477715 |
Multiple vulnerabilities in IBM Aspera Faspex
MEDIUM (5.4)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Published: 2026-03-10T19:57:16.491Z
Updated: 2026-03-10T20:12:39.788Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36226 |
vulnerable | 2026-06-08 07:21:01.476044 |
Multiple vulnerabilities in IBM Aspera Faspex
MEDIUM (5.4)
IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-10T19:59:35.843Z
Updated: 2026-03-10T20:12:39.646Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.