Known vulnerabilities in IBM Aspera Faspex for Linux

Vendor: IBM Corporation
Software: IBM Aspera Faspex for Linux
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_faspex_for_linux:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 46
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Faspex for Linux IBM Aspera Faspex for Linux is affected by 46 known vulnerabilities: 1 critical, 4 high, 26 medium, 15 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107491 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3423		 CWE-79 Low
No
No
 5.0.12 16.04.2025 SB2025041639
#VU106236 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-22403		 CWE-614 Medium
No
No
 5.0.2 28.03.2025 SB2025032816
#VU106057 - Improper Encoding or Escaping of Output
CVE-2022-22399		 CWE-116 Medium
No
No
 5.0.2 26.03.2025 SB2022110612
#VU89851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37411		 CWE-79 Low
No
No
 5.0.9 28.05.2024 SB2024052835
#VU88851 - Inadequate Encryption Strength
CVE-2022-40745		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88850 - Inadequate Encryption Strength
CVE-2023-37397		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88845 - Inadequate Encryption Strength
CVE-2023-37395		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88844 - Resource exhaustion
CVE-2023-27279		 CWE-400 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88843 - Inadequate Encryption Strength
CVE-2023-37396		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88839 - Information Exposure Through Log Files
CVE-2023-22869		 CWE-532 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88833 - Unprotected Storage of Credentials
CVE-2023-37400		 CWE-256 Low
No
No
 5.0.8 19.04.2024 SB2024041919
#VU85850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40744		 CWE-79 Low
No
No
 5.0.7 29.01.2024 SB2024012933
#VU84535 - Incorrect Authorization
CVE-2023-30995		 CWE-863 Medium
No
No
 4.4.2 PL4, 5.0.6 19.12.2023 SB2023121902
#VU73780 - Improper Access Control
CVE-2023-27875		 CWE-284 High
No
No
 - 17.03.2023 SB2023031714
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 5.0.5 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU65877 - Improper Access Control
CVE-2022-2497		 CWE-284 Low
No
No
 4.4.1 PL 12, 5.0.1 29.07.2022 SB2022072918
SB2024101811
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64080 - Out-of-bounds read
CVE-2022-28330		 CWE-125 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022070730
and 11 more
#VU63708 - Improper Access Control
CVE-2022-22497		 CWE-284 Medium
No
No
 4.4.1 PL12, 5.0.1 26.05.2022 SB2022052636


Showing elements 1 - 20 out of 46