AF
Product
Aspera Faspex
On CISA KEVExploited in the wildRansomware-linked
49
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 15Medium 29Low 2
Watch
Add Aspera Faspex to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-33137 | 8.8 | May 22 | IBM Aspera Faspex data modification Affected: 5.0.0 through 5.0.12 |
| CVE-2025-33136 | 8.8 | May 22 | IBM Aspera Faspex data modification Affected: 5.0.0 through 5.0.12 |
| CVE-2023-27874 | 8.8 | Mar 21 | IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data Affected: through 4.4.2; 4.4.2; 4.4.2 |
| CVE-2026-14996 | 8.2 | Jul 28 | Multiple vulnerabilities in IBM Aspera Faspex Affected: 5.0.0 before 5.0.16 |
| CVE-2024-45098 | 8.1 | Sep 5 | IBM Aspera Faspex bypass security Affected: 5.0.0 through 5.0.9 |
| CVE-2023-37400 | 7.8 | Apr 19 | IBM Aspera Faspex privilege escalation Affected: 5.0.0 through 5.0.7 |
| CVE-2022-22401 | 7.5 | Sep 8 | IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information Affected: through 5.0.5 |
| CVE-2023-30995 | 7.5 | Sep 8 | IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request Affected: through 5.0.5 |
| CVE-2023-35906 | 7.5 | Sep 5 | IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls Affected: through 5.0.5 |
| CVE-2023-27871 | 7.5 | Mar 21 | IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query Affected: through 4.4.2; 4.4.2; 4.4.2 |
| CVE-2023-27875 | 7.5 | Mar 16 | IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls Affected: 5.0.4 |
| CVE-2022-22497 | 7.5 | May 24 | IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token Affected: 4.4.1; 5.0.0 |
| CVE-2026-14958 | 7.2 | Jul 28 | OS command injection in IBM Aspera Faspex Affected: 5.0.0 before 5.0.16 |
| CVE-2026-14959 | 7.2 | Jul 28 | OS Command Injection in IBM Aspera Faspex Affected: 5.0.0 before 5.0.16 |
| CVE-2024-45097 | 7.1 | Sep 5 | IBM Aspera Faspex bypass security Affected: 5.0.0 through 5.0.9 |
Showing 15