IBM Aspera Faspex

• CVE-2022-47986 Critical 9.8 Exploited IBM Aspera Faspex code execution 100.0%
• CVE-2026-123218 Critical 9.8 IBM Aspera Faspex Authorization Bypass –
• CVE-2025-36171 Medium 4.9 IBM Aspera Faspex denial of service 0.3%
• CVE-2025-36225 Medium 4.3 IBM Aspera Faspex information disclosure 0.2%
• CVE-2023-37401 Medium 5.3 IBM Aspera Faspex cross-origin resource sharing 0.2%
• CVE-2025-36040 Medium 6.5 IBM Aspera Faspex session fixation 0.3%
• CVE-2025-36039 Medium 6.5 IBM Aspera Faspex bypass security 0.3%
• CVE-2025-33138 Medium 5.4 IBM Aspera Faspex HTML injection 0.3%
• CVE-2025-33137 High 7.1 IBM Aspera Faspex data modification 0.4%
• CVE-2025-33136 High 7.1 IBM Aspera Faspex data modification 0.4%
• CVE-2025-3423 Medium 5.4 IBM Aspera Faspex 5 cross-site scripting 0.3%
• CVE-2023-35907 Medium 5.9 IBM Aspera Faspex information disclosure 0.3%
• CVE-2023-37413 Medium 5.3 IBM Aspera Faspex information disclosure 0.3%
• CVE-2023-37398 Medium 5.9 IBM Aspera Faspex information disclosure 0.3%
• CVE-2023-37412 Medium 4.4 IBM Aspera Faspex improper access control 0.3%
• CVE-2023-37395 Low 2.5 IBM Aspera Faspex information disclosure <0.1%
• CVE-2024-45097 Medium 5.9 IBM Aspera Faspex bypass security 0.3%
• CVE-2024-45096 Medium 6.5 IBM Aspera Faspex information disclosure 0.4%
• CVE-2024-45098 Medium 6.8 IBM Aspera Faspex bypass security 0.4%
• CVE-2023-37411 Medium 4.8 IBM Aspera Faspex cross-site scripting 0.2%
• CVE-2022-40745 Medium 5.5 IBM Aspera Faspex information disclosure 0.1%
• CVE-2023-37397 Low 3.6 IBM Aspera Faspex data manipulation <0.1%
• CVE-2023-27279 Medium 6.5 IBM Aspera Faspex denial of service 0.7%
• CVE-2023-37396 Low 2.5 IBM Aspera Faspex information disclosure <0.1%
• CVE-2023-22869 Medium 5.5 IBM Aspera Faspex information disclosure 0.2%
• CVE-2023-37400 High 7.8 IBM Aspera Faspex privilege escalation 0.2%
• CVE-2022-22399 Medium 5.4 IBM Aspera Faspex HTTP header injection 0.4%
• CVE-2022-40744 Medium 4.8 IBM Aspera Faspex cross-site scripting 0.3%
• CVE-2022-22402 Medium 5.4 IBM Aspera Faspex cross-site scripting 0.4%
• CVE-2022-22401 Medium 5.9 IBM Aspera Faspex information disclosure 0.5%
• CVE-2022-22409 Medium 5.3 IBM Aspera Faspex information disclosure 0.8%
• CVE-2023-30995 High 7.5 IBM Aspera Faspex improper access control 0.9%
• CVE-2023-24965 Medium 5.8 IBM Aspera Faspex improper access control 0.5%
• CVE-2022-22405 Medium 5.9 IBM Aspera Faspex information disclosure 0.5%
• CVE-2023-35906 Medium 5.3 IBM Aspera Faspex security bypass 0.4%
• CVE-2023-22870 Medium 5.9 IBM Aspera Faspex information disclosure 0.3%
• CVE-2023-27873 Medium 6.5 IBM Aspera Faspex information disclosure 0.8%
• CVE-2023-27874 Critical 9.9 IBM Aspera Faspex XML external entity injection 1.3%
• CVE-2023-27871 High 7.5 IBM Aspera Faspex information disclosure 0.9%
• CVE-2023-27875 High 7.5 IBM Aspera Faspex improper access controls 0.6%
• CVE-2023-22868 Medium 5.4 IBM Aspera Faspex cross-site scripting 0.4%
• CVE-2022-22497 High 7.5 IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951. 1.2%