Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm aspera faspex vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-22497
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.
Ibm Aspera Faspex 5.0.0Ibm Aspera Faspex 4.4.1
5.4
CVSSv3
CVE-2022-40744
IBM Aspera Faspex 5.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
Ibm Aspera Faspex
6.5
CVSSv3
CVE-2023-27279
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533.
Ibm Aspera Faspex
5.5
CVSSv3
CVE-2022-40745
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452.
Ibm Aspera Faspex
4.4
CVSSv3
CVE-2023-37397
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672.
Ibm Aspera Faspex
7.5
CVSSv3
CVE-2020-4432
Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
Ibm Aspera Application Platform On DemandIbm Aspera Faspex On DemandIbm Aspera High-speed Transfer EndpointIbm Aspera High-speed Transfer ServerIbm Aspera High-speed Transfer Server For Cloud Pak For IntegrationIbm Aspera Proxy ServerIbm Aspera Server On DemandIbm Aspera Shares On DemandIbm Aspera StreamingIbm Aspera Transfer Cluster Manager
7.5
CVSSv3
CVE-2020-4433
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to cra...
Ibm Aspera Application Platform On DemandIbm Aspera Faspex On DemandIbm Aspera High-speed Transfer EndpointIbm Aspera High-speed Transfer ServerIbm Aspera High-speed Transfer Server For Cloud Pak For IntegrationIbm Aspera Proxy ServerIbm Aspera Server On DemandIbm Aspera Shares On DemandIbm Aspera StreamingIbm Aspera Transfer Cluster Manager
7.5
CVSSv3
CVE-2020-4435
Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. ...
Ibm Aspera Application Platform On DemandIbm Aspera Faspex On DemandIbm Aspera High-speed Transfer EndpointIbm Aspera High-speed Transfer ServerIbm Aspera High-speed Transfer Server For Cloud Pak For IntegrationIbm Aspera Proxy ServerIbm Aspera Server On DemandIbm Aspera Shares On DemandIbm Aspera StreamingIbm Aspera Transfer Cluster Manager
7.5
CVSSv3
CVE-2020-4436
Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902.
Ibm Aspera Application Platform On DemandIbm Aspera Faspex On DemandIbm Aspera High-speed Transfer EndpointIbm Aspera High-speed Transfer ServerIbm Aspera High-speed Transfer Server For Cloud Pak For IntegrationIbm Aspera Proxy ServerIbm Aspera Server On DemandIbm Aspera Shares On DemandIbm Aspera StreamingIbm Aspera Transfer Cluster Manager
7.5
CVSSv3
CVE-2020-4434
Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallb...
Ibm Aspera Application Platform On DemandIbm Aspera Faspex On DemandIbm Aspera High-speed Transfer EndpointIbm Aspera High-speed Transfer ServerIbm Aspera High-speed Transfer Server For Cloud Pak For IntegrationIbm Aspera Proxy ServerIbm Aspera Server On DemandIbm Aspera Shares On DemandIbm Aspera StreamingIbm Aspera Transfer Cluster Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook