Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Aspera Faspex — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in Aspera Faspex, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting Aspera Faspex, a file transfer solution developed by Aspera, classified under general software flaws and tagged with relevant risk indicators. It collects known security issues reported across all versions of Aspera Faspex, covering advisories published from the product's initial release through the most recent updates. Readers can use this resource to track the vendor's security advisories, understand the specific class of weaknesses present in this product, and review the complete vulnerability history of Aspera Faspex to assess its overall security posture. The aggregation focuses on verified issues documented by Aspera, including buffer overflows, authentication bypasses, and denial of service conditions that have impacted the file transfer protocol stack and web interface.

Vendor: IBM

CVE ID Title CVSS Severity Published
CVE-2025-36171 IBM Aspera Faspex denial of service CWE-770 4.9 Medium 2025-10-09
CVE-2025-36225 IBM Aspera Faspex information disclosure CWE-203 4.3 Medium 2025-10-09
CVE-2023-37401 IBM Aspera Faspex cross-origin resource sharing CWE-942 5.3 Medium 2025-10-09
CVE-2025-36040 IBM Aspera Faspex session fixation CWE-613 6.5 Medium 2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security CWE-602 6.5 Medium 2025-07-30
CVE-2025-33138 IBM Aspera Faspex HTML injection CWE-80 5.4 Medium 2025-05-22
CVE-2025-33137 IBM Aspera Faspex data modification CWE-602 7.1 High 2025-05-22
CVE-2025-33136 IBM Aspera Faspex data modification CWE-471 7.1 High 2025-05-22
CVE-2025-3423 IBM Aspera Faspex 5 cross-site scripting CWE-79 5.4 Medium 2025-04-13
CVE-2023-35907 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium 2025-01-29
CVE-2023-37413 IBM Aspera Faspex information disclosure CWE-204 5.3 Medium 2025-01-29
CVE-2023-37398 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium 2025-01-29
CVE-2023-37412 IBM Aspera Faspex improper access control CWE-250 4.4 Medium 2025-01-29
CVE-2023-37395 IBM Aspera Faspex information disclosure CWE-327 2.5 Low 2024-12-11
CVE-2024-45097 IBM Aspera Faspex bypass security CWE-650 5.9 Medium 2024-09-05
CVE-2024-45096 IBM Aspera Faspex information disclosure CWE-548 6.5 Medium 2024-09-05
CVE-2024-45098 IBM Aspera Faspex bypass security CWE-650 6.8 Medium 2024-09-05
CVE-2023-37411 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium 2024-05-28
CVE-2022-40745 IBM Aspera Faspex information disclosure CWE-326 5.5 Medium 2024-04-19
CVE-2023-37397 IBM Aspera Faspex data manipulation CWE-326 3.6 Low 2024-04-19
CVE-2023-27279 IBM Aspera Faspex denial of service CWE-799 6.5 Medium 2024-04-19
CVE-2023-37396 IBM Aspera Faspex information disclosure CWE-327 2.5 Low 2024-04-19
CVE-2023-22869 IBM Aspera Faspex information disclosure CWE-532 5.5 Medium 2024-04-19
CVE-2023-37400 IBM Aspera Faspex privilege escalation CWE-522 7.8 High 2024-04-19
CVE-2022-22399 IBM Aspera Faspex HTTP header injection CWE-644 5.4 Medium 2024-03-05
CVE-2022-40744 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium 2024-02-02
CVE-2022-22402 IBM Aspera Faspex cross-site scripting CWE-79 5.4 Medium 2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure 5.9 Medium 2023-09-08
CVE-2022-22409 IBM Aspera Faspex information disclosure CWE-200 5.3 Medium 2023-09-08
CVE-2023-30995 IBM Aspera Faspex improper access control 7.5 High 2023-09-08

All 41 known CVE vulnerabilities affecting Aspera Faspex with full Chinese analysis, references, and POCs where available.