1318 matches found
CVE-2025-36040
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms...
IBM Aspera Faspex 代码问题漏洞
IBM Aspera Faspex is IBM's high-performance file transfer solution designed to transfer large files quickly and reliably. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.12.1, which stems from insufficient client-side enforcement of server-side security mechanisms...
IBM Aspera Faspex 安全漏洞
IBM Aspera Faspex is IBM's high-performance file transfer solution designed for fast, secure transfer of large-volume data. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.12.1, which originates from a client not properly implementing server-side security mechanism...
CVE-2025-36040
CVE-2025-36040 affects IBM Aspera Faspex 5.0.0–5.0.12.1. Description in provided documents indicates an authenticated user could perform unauthorized actions due to client-side enforcement of server-side security mechanisms. The vulnerability is documented across multiple feeds (Red Hat, CNVD, NV...
CVE-2025-36040 IBM Aspera Faspex session fixation
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms...
CVE-2025-36040 IBM Aspera Faspex session fixation
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms...
CVE-2025-36039 IBM Aspera Faspex bypass security
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,...
CVE-2025-36039 IBM Aspera Faspex bypass security
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,...
CVE-2025-36039
Summary (CVE-2025-36039) IBM Aspera Faspex 5.0.0–5.0.12.1 contains a vulnerability where an authenticated user can perform unauthorized actions due to client-side enforcement of server-side security mechanisms. The issue is tied to how Faspex handles security checks on the client side, allowing a...
Security Bulletin: IBM Aspera Faspex is affected by open-source related vulnerabilities and unauthorized actions from authenticated users
Summary IBM Aspera Faspex has addressed vulnerabilities related to denial-of-service, inefficient code execution under specific conditions, and unintended traffic routing. The 3rd party vulnerabilities are for very specific use cases that are not necessarily exposed through Faspex. Additionally,...
PT-2025-31460 · Ibm · Aspera Faspex
Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.12.1 Description: IBM Aspera Faspex versions 5.0.0 through 5.0.12.1 may allow an authenticated user to perform unauthorized actions due to client-side enforcement of server-side security mechanisms...
PT-2025-31461 · Ibm · Ibm Aspera Faspex
Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.12.1 Description: The software may allow an authenticated user to perform unauthorized actions due to client-side enforcement of server-side security mechanisms. Recommendations: Update to a versio...
The vulnerability of the IBM Aspera Shares software lies in the incorrect limitation on XML references to external objects, which allows a hacker to expose confidential information.
The vulnerability of the IBM Aspera Shares software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose confidential information...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to changes in the assumed immutable data, allows a hacker to disclose protected information and perform unauthorized actions on behalf of another user.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to changes in the assumed immutable data. Exploiting this vulnerability could allow a malicious actor to disclose protected information and perform unauthorized actions on behalf of another user...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to the lack of protection for website structures, allows attackers to perform cross-site scripting attacks.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2025-33138
IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2025-33137
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security...
CVE-2025-33136
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data...