Known vulnerabilities in IBM Aspera Faspex for Linux

Vendor: IBM Corporation
Software: IBM Aspera Faspex for Linux
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_faspex_for_linux:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 46
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Faspex for Linux IBM Aspera Faspex for Linux is affected by 46 known vulnerabilities: 1 critical, 4 high, 26 medium, 15 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107491 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3423		 CWE-79 Low
No
No
 5.0.12 16.04.2025 SB2025041639
#VU106236 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-22403		 CWE-614 Medium
No
No
 5.0.2 28.03.2025 SB2025032816
#VU89851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37411		 CWE-79 Low
No
No
 5.0.9 28.05.2024 SB2024052835
#VU88851 - Inadequate Encryption Strength
CVE-2022-40745		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88850 - Inadequate Encryption Strength
CVE-2023-37397		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88845 - Inadequate Encryption Strength
CVE-2023-37395		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88844 - Resource exhaustion
CVE-2023-27279		 CWE-400 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88843 - Inadequate Encryption Strength
CVE-2023-37396		 CWE-326 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88839 - Information Exposure Through Log Files
CVE-2023-22869		 CWE-532 Low
No
No
 5.0.8 19.04.2024 SB2024041923
#VU88833 - Unprotected Storage of Credentials
CVE-2023-37400		 CWE-256 Low
No
No
 5.0.8 19.04.2024 SB2024041919
#VU85850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40744		 CWE-79 Low
No
No
 5.0.7 29.01.2024 SB2024012933
#VU84535 - Incorrect Authorization
CVE-2023-30995		 CWE-863 Medium
No
No
 4.4.2 PL4, 5.0.6 19.12.2023 SB2023121902
#VU73780 - Improper Access Control
CVE-2023-27875		 CWE-284 High
No
No
 - 17.03.2023 SB2023031714
#VU72081 - Deserialization of Untrusted Data
CVE-2022-47986		 CWE-502 Critical
Available
Exploited
 4.4.2 PL2 09.02.2023 SB2023020913
#VU72080 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22868		 CWE-79 Low
No
No
 4.4.2 PL2 09.02.2023 SB2023020913
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 5.0.5 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU65877 - Improper Access Control
CVE-2022-2497		 CWE-284 Low
No
No
 4.4.1 PL 12, 5.0.1 29.07.2022 SB2022072918
SB2024101811
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 4.4.2 PL2 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 4.4.2 PL2 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more


Showing elements 1 - 20 out of 46