All 41 CVE vulnerabilities found in Aspera Faspex, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security vulnerabilities affecting Aspera Faspex, a file transfer solution developed by Aspera, classified under general software flaws and tagged with relevant risk indicators. It collects known security issues reported across all versions of Aspera Faspex, covering advisories published from the product's initial release through the most recent updates. Readers can use this resource to track the vendor's security advisories, understand the specific class of weaknesses present in this product, and review the complete vulnerability history of Aspera Faspex to assess its overall security posture. The aggregation focuses on verified issues documented by Aspera, including buffer overflows, authentication bypasses, and denial of service conditions that have impacted the file transfer protocol stack and web interface.
Vendor: IBM
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-24965 | IBM Aspera Faspex improper access control | 5.8 | Medium | 2023-09-08 |
| CVE-2022-22405 | IBM Aspera Faspex information disclosure CWE-311 | 5.9 | Medium | 2023-09-08 |
| CVE-2023-35906 | IBM Aspera Faspex security bypass CWE-291 | 5.3 | Medium | 2023-09-05 |
| CVE-2023-22870 | IBM Aspera Faspex information disclosure CWE-319 | 5.9 | Medium | 2023-09-05 |
| CVE-2023-27873 | IBM Aspera Faspex information disclosure | 6.5 | Medium | 2023-03-21 |
| CVE-2023-27874 | IBM Aspera Faspex XML external entity injection CWE-611 | 9.9 | Critical | 2023-03-21 |
| CVE-2023-27871 | IBM Aspera Faspex information disclosure | 7.5 | High | 2023-03-21 |
| CVE-2023-27875 | IBM Aspera Faspex improper access controls | 7.5 | High | 2023-03-16 |
| CVE-2023-22868 | IBM Aspera Faspex cross-site scripting CWE-79 | 5.4 | Medium | 2023-02-17 |
| CVE-2022-47986 | IBM Aspera Faspex code execution CWE-502 | 9.8 | Critical | 2023-02-17 |
| CVE-2022-22497 | IBM Aspera 安全漏洞 | 7.5 | - | 2022-05-24 |
All 41 known CVE vulnerabilities affecting Aspera Faspex with full Chinese analysis, references, and POCs where available.