IBM Aspera Faspex
41 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36171 | 5.0.0 – 5.0.13.1 | IBM Aspera Faspex denial of service | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-36225 | 5.0.0 – 5.0.13.1 | IBM Aspera Faspex information disclosure | MEDIUM 4.3 | 0.2 % | ||
| CVE-2023-37401 | 5.0.0 – 5.0.13.1 | IBM Aspera Faspex cross-origin resource sharing | MEDIUM 5.3 | 0.2 % | ||
| CVE-2025-36040 | 5.0.0 – 5.0.12.1 | IBM Aspera Faspex session fixation | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-36039 | 5.0.0 – 5.0.12.1 | IBM Aspera Faspex bypass security | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-33138 | 5.0.0 – 5.0.12 | IBM Aspera Faspex HTML injection | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-33137 | 5.0.0 – 5.0.12 | IBM Aspera Faspex data modification | HIGH 8.8 | 0.4 % | ||
| CVE-2025-33136 | 5.0.0 – 5.0.12 | IBM Aspera Faspex data modification | HIGH 8.8 | 0.4 % | ||
| CVE-2025-3423 | 5.0.0 – 5.0.11 | IBM Aspera Faspex 5 cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-35907 | 5.0.0 – 5.0.10 | IBM Aspera Faspex information disclosure | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-37413 | 5.0.0 – 5.0.10 | IBM Aspera Faspex information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2023-37398 | 5.0.0 – 5.0.10 | IBM Aspera Faspex information disclosure | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-37412 | 5.0.0 – 5.0.10 | IBM Aspera Faspex improper access control | MEDIUM 4.9 | 0.3 % | ||
| CVE-2023-37395 | 5.0.0 – 5.0.7 | IBM Aspera Faspex information disclosure | LOW 3.3 | 0.1 % | ||
| CVE-2024-45097 | 5.0.0 – 5.0.9 | IBM Aspera Faspex bypass security | HIGH 7.1 | 0.3 % | ||
| CVE-2024-45096 | 5.0.0 – 5.0.9 | IBM Aspera Faspex information disclosure | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-45098 | 5.0.0 – 5.0.9 | IBM Aspera Faspex bypass security | HIGH 8.1 | 0.4 % | ||
| CVE-2023-37411 | 5.0.0 – 5.0.6 | IBM Aspera Faspex cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2022-40745 | 5.0.0 – 5.0.7 | IBM Aspera Faspex information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-37397 | 5.0.0 – 5.0.7 | IBM Aspera Faspex data manipulation | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-27279 | 5.0.0 – 5.0.7 | IBM Aspera Faspex denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-37396 | 5.0.0 – 5.0.7 | IBM Aspera Faspex information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-22869 | 5.0.0 – 5.0.7 | IBM Aspera Faspex information disclosure | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-37400 | 5.0.0 – 5.0.7 | IBM Aspera Faspex privilege escalation | HIGH 7.8 | 0.2 % | ||
| CVE-2022-22399 | 5.0.0, 5.0.1 | IBM Aspera Faspex HTTP header injection | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-40744 | 5.0.6 | IBM Aspera Faspex cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2022-22402 | 5.0.5 | IBM Aspera Faspex cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-22401 | 5.0.5 | IBM Aspera Faspex information disclosure | HIGH 7.5 | 0.5 % | ||
| CVE-2022-22409 | 5.0.5 | IBM Aspera Faspex information disclosure | MEDIUM 5.3 | 0.8 % | ||
| CVE-2023-30995 | 5.0 – 5.0.5 ; 4.0 – 4.4.2 | IBM Aspera Faspex improper access control | HIGH 7.5 | 0.9 % | ||
| CVE-2023-24965 | 5.0.5 | IBM Aspera Faspex improper access control | MEDIUM 5.8 | 0.5 % | ||
| CVE-2022-22405 | 5.0.5 | IBM Aspera Faspex information disclosure | MEDIUM 5.9 | 0.5 % | ||
| CVE-2023-35906 | 5.0.5 | IBM Aspera Faspex security bypass | HIGH 7.5 | 0.4 % | ||
| CVE-2023-22870 | 5.0.5 | IBM Aspera Faspex information disclosure | MEDIUM 5.9 | 0.3 % | ||
| CVE-2023-27873 | 4.4.2 | IBM Aspera Faspex information disclosure | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-27874 | 4.4.2 | IBM Aspera Faspex XML external entity injection | CRITICAL 9.9 | 1.3 % | ||
| CVE-2023-27871 | 4.4.2 | IBM Aspera Faspex information disclosure | HIGH 7.5 | 0.9 % | ||
| CVE-2023-27875 | 5.0.4 | IBM Aspera Faspex improper access controls | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22868 | 4.4.1 | IBM Aspera Faspex cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-47986 | 4.4.2 Patch Level 1 and earlier | IBM Aspera Faspex code execution | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2022-22497 | 4.4.1 ; 5.0.0 | IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951. | HIGH 7.5 | 1.2 % |