Aspera Faspex@5.0.0 Security Vulnerabilities and Issues — Aspera Faspex@5.0.0 CVE List

Lucene search

IbmAspera Faspex5.0.0

5 matches found

CVE•added 2024/03/05 8:16 p.m.•81 views

CVE-2022-22399

IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Fo...

6.5CVSS5.3AI score0.00057EPSS

CVE•added 2024/04/19 5:15 p.m.•76 views

CVE-2023-27279

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533.

6.5CVSS6.3AI score0.00132EPSS

CVE•added 2022/05/24 10:15 p.m.•64 views

CVE-2022-22497

IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.

7.5CVSS7.3AI score0.00286EPSS

CVE•added 2024/04/19 5:15 p.m.•41 views

CVE-2022-40745

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452.

5.5CVSS5.5AI score0.00026EPSS

CVE•added 2024/04/19 2:15 p.m.•41 views

CVE-2023-37400

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677.

7.8CVSS6.4AI score0.00019EPSS