Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Aspera Faspex — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in Aspera Faspex, with AI-generated Chinese analysis, references, and POCs.

This page is a vulnerability aggregation resource for the Aspera Faspex product, specifically focusing on Common Weakness Enumeration (CWE) classifications and associated security advisories. It collects documented security vulnerabilities affecting Aspera Faspex versions, covering a comprehensive time range from initial release notes through the most recent patches and updates. Here, users can discover detailed insights by tracking the vendor's historical security advisories to understand the context and severity of reported issues. Visitors can also analyze specific weakness classes to see how they manifest within the Faspex architecture, aiding in targeted risk assessment and mitigation planning. Furthermore, the page provides a chronological history of vulnerabilities for the product, allowing administrators and security professionals to review past incidents, evaluate the effectiveness of previous remediation efforts, and identify potential patterns or recurring issues. This aggregated data serves as a centralized reference for understanding the security posture of Aspera Faspex over time. By consolidating disparate sources into a single view, the page facilitates more efficient vulnerability management and informed decision-making for teams responsible for securing file transfer and exchange environments. The content is structured to support both quick lookups for specific concerns and deeper analysis of broader security trends. Users can navigate through entries to gain a holistic view of the product's evolving threat landscape without needing to search multiple external databases. This approach streamlines the process of staying compliant with security standards and maintaining robust defense mechanisms against known exploits. The information provided is intended to support technical reviews, audit preparations, and proactive security hygiene within organizational IT infrastructure.

Vendor: IBM

CVE ID Title CVSS Severity Published
CVE-2025-36171 IBM Aspera Faspex denial of service CWE-770 4.9 Medium 2025-10-09
CVE-2025-36225 IBM Aspera Faspex information disclosure CWE-203 4.3 Medium 2025-10-09
CVE-2023-37401 IBM Aspera Faspex cross-origin resource sharing CWE-942 5.3 Medium 2025-10-09
CVE-2025-36040 IBM Aspera Faspex session fixation CWE-613 6.5 Medium 2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security CWE-602 6.5 Medium 2025-07-30
CVE-2025-33138 IBM Aspera Faspex HTML injection CWE-80 5.4 Medium 2025-05-22
CVE-2025-33137 IBM Aspera Faspex data modification CWE-602 7.1 High 2025-05-22
CVE-2025-33136 IBM Aspera Faspex data modification CWE-471 7.1 High 2025-05-22
CVE-2025-3423 IBM Aspera Faspex 5 cross-site scripting CWE-79 5.4 Medium 2025-04-13
CVE-2023-35907 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium 2025-01-29
CVE-2023-37413 IBM Aspera Faspex information disclosure CWE-204 5.3 Medium 2025-01-29
CVE-2023-37398 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium 2025-01-29
CVE-2023-37412 IBM Aspera Faspex improper access control CWE-250 4.4 Medium 2025-01-29
CVE-2023-37395 IBM Aspera Faspex information disclosure CWE-327 2.5 Low 2024-12-11
CVE-2024-45097 IBM Aspera Faspex bypass security CWE-650 5.9 Medium 2024-09-05
CVE-2024-45096 IBM Aspera Faspex information disclosure CWE-548 6.5 Medium 2024-09-05
CVE-2024-45098 IBM Aspera Faspex bypass security CWE-650 6.8 Medium 2024-09-05
CVE-2023-37411 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium 2024-05-28
CVE-2022-40745 IBM Aspera Faspex information disclosure CWE-326 5.5 Medium 2024-04-19
CVE-2023-37397 IBM Aspera Faspex data manipulation CWE-326 3.6 Low 2024-04-19
CVE-2023-27279 IBM Aspera Faspex denial of service CWE-799 6.5 Medium 2024-04-19
CVE-2023-37396 IBM Aspera Faspex information disclosure CWE-327 2.5 Low 2024-04-19
CVE-2023-22869 IBM Aspera Faspex information disclosure CWE-532 5.5 Medium 2024-04-19
CVE-2023-37400 IBM Aspera Faspex privilege escalation CWE-522 7.8 High 2024-04-19
CVE-2022-22399 IBM Aspera Faspex HTTP header injection CWE-644 5.4 Medium 2024-03-05
CVE-2022-40744 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium 2024-02-02
CVE-2022-22402 IBM Aspera Faspex cross-site scripting CWE-79 5.4 Medium 2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure 5.9 Medium 2023-09-08
CVE-2022-22409 IBM Aspera Faspex information disclosure CWE-200 5.3 Medium 2023-09-08
CVE-2023-30995 IBM Aspera Faspex improper access control 7.5 High 2023-09-08

All 41 known CVE vulnerabilities affecting Aspera Faspex with full Chinese analysis, references, and POCs where available.