Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm aspera faspex 5.0.0 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2022-22497
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.
Ibm Aspera Faspex 5.0.0
Ibm Aspera Faspex 4.4.1
NA
CVE-2022-40745
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452.
Ibm Aspera Faspex
NA
CVE-2023-27279
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533.
Ibm Aspera Faspex
NA
CVE-2023-37397
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672.
Ibm Aspera Faspex
NA
CVE-2023-37400
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677.
NA
CVE-2023-22869
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 244119.
NA
CVE-2023-37396
IBM Aspera Faspex 5.0.0 up to and including 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671.
NA
CVE-2023-37411
IBM Aspera Faspex 5.0.0 up to and including 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
NA
CVE-2022-22399
IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or se...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started