Known vulnerabilities in IBM Aspera Faspex for Windows

Vendor: IBM Corporation
Software: IBM Aspera Faspex for Windows
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_faspex_for_windows:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 34
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Faspex for Windows IBM Aspera Faspex for Windows is affected by 34 known vulnerabilities: 1 critical, 3 high, 25 medium, 5 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106236 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-22403		 CWE-614 Medium
No
No
 5.0.2 28.03.2025 SB2025032816
#VU106057 - Improper Encoding or Escaping of Output
CVE-2022-22399		 CWE-116 Medium
No
No
 5.0.2 26.03.2025 SB2022110612
#VU84535 - Incorrect Authorization
CVE-2023-30995		 CWE-863 Medium
No
No
 4.4.2 PL4 19.12.2023 SB2023121902
#VU72081 - Deserialization of Untrusted Data
CVE-2022-47986		 CWE-502 Critical
Available
Exploited
 4.4.2 PL2 09.02.2023 SB2023020913
#VU72080 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22868		 CWE-79 Low
No
No
 4.4.2 PL2 09.02.2023 SB2023020913
#VU65877 - Improper Access Control
CVE-2022-2497		 CWE-284 Low
No
No
 4.4.1 PL 12 29.07.2022 SB2022072918
SB2024101811
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 4.4.2 PL2 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64080 - Out-of-bounds read
CVE-2022-28330		 CWE-125 Medium
No
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022070730
and 11 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 4.4.2 PL2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 4.4.2 PL2 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 4.4.2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 4.4.2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 4.4.2 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 4.4.2 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 4.4.2 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 4.4.2 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more


Showing elements 1 - 20 out of 34