aspera faspex vulnerabilities and exploits

(subscribe to this query)

IBM Aspera Faspex 4.4.2 Patch Level 1 and previous versions could allow a remote malicious user to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execu...

Ibm Aspera Faspex Ibm Aspera Faspex 4.4.2

4 Github repositories1 Article

IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244117.

Ibm Aspera Faspex Ibm Aspera Faspex 4.4.1

IBM Aspera Faspex 4.4.2 could allow a remote malicious user to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.

Ibm Aspera Faspex Ibm Aspera Faspex 4.4.2

IBM Aspera Faspex 4.4.2 could allow a remote authenticated malicious user to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.

Ibm Aspera Faspex Ibm Aspera Faspex 4.4.2

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.

Ibm Aspera Faspex Ibm Aspera Faspex 4.4.2

IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.

Ibm Aspera Faspex 5.0.0 Ibm Aspera Faspex 4.4.1

IBM Aspera Faspex 5.0.0 up to and including 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.

Ibm Aspera Faspex

IBM Aspera Faspex 5.0.0 up to and including 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.

Ibm Aspera Faspex

IBM Aspera Faspex 5.0.0 up to and including 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.

Ibm Aspera Faspex

IBM Aspera Faspex 4.0 up to and including 4.4.2 and 5.0 up to and including 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.

Ibm Aspera Faspex

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook