Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14958 1 Ibm 1 Aspera Faspex 5 2026-07-29 9.1 Critical
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.
CVE-2026-14959 1 Ibm 1 Aspera Faspex 5 2026-07-29 9.1 Critical
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.
CVE-2023-37412 1 Ibm 1 Aspera Faspex 2025-03-04 4.4 Medium
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls.
CVE-2023-37413 1 Ibm 1 Aspera Faspex 2025-03-04 5.3 Medium
IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy.
CVE-2023-37398 1 Ibm 1 Aspera Faspex 2025-02-12 5.9 Medium
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
CVE-2023-35907 1 Ibm 1 Aspera Faspex 2025-02-12 5.9 Medium
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.