Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Aspera Faspex — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in Aspera Faspex, with AI-generated Chinese analysis, references, and POCs.

This page documents known security vulnerabilities for Aspera Faspex, categorized by common weakness types such as buffer overflows and injection flaws. It aggregates vulnerability data spanning from the product’s initial release through recent updates, providing a comprehensive historical view of security issues affecting this file transfer solution. Users can utilize this resource to track vendor advisories from IBM Security, understand the severity and impact of specific weakness classes within the Aspera ecosystem, and look up the vulnerability history of specific versions to assess risk exposure. The collection includes details on affected releases, patch availability, and exploit status where applicable, ensuring that security teams have the context needed to prioritize remediation efforts. By consolidating these findings, the page serves as a central reference point for administrators seeking to harden their Aspera Faspex deployments against known threats. It does not provide real-time monitoring or automated patching but offers static, curated information to support manual security assessments and compliance audits. The focus remains strictly on factual reporting of disclosed issues, avoiding speculative analysis or unverified claims. This approach ensures that the data remains reliable and useful for technical decision-making. For each listed vulnerability, the page attempts to map the issue to the latest Aspera Faspex version and indicates whether a fix has been released in a subsequent update. This structure allows users to quickly determine if their current installation is impacted and identify the necessary upgrade path to mitigate identified risks. The information is updated regularly as new disclosures emerge from IBM and independent security researchers.

Vendor: IBM

CVE IDTitleCVSSSeverityPublished
CVE-2025-36171 IBM Aspera Faspex denial of service CWE-770 4.9 Medium2025-10-09
CVE-2025-36225 IBM Aspera Faspex information disclosure CWE-203 4.3 Medium2025-10-09
CVE-2023-37401 IBM Aspera Faspex cross-origin resource sharing CWE-942 5.3 Medium2025-10-09
CVE-2025-36040 IBM Aspera Faspex session fixation CWE-613 6.5 Medium2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security CWE-602 6.5 Medium2025-07-30
CVE-2025-33138 IBM Aspera Faspex HTML injection CWE-80 5.4 Medium2025-05-22
CVE-2025-33137 IBM Aspera Faspex data modification CWE-602 7.1 High2025-05-22
CVE-2025-33136 IBM Aspera Faspex data modification CWE-471 7.1 High2025-05-22
CVE-2025-3423 IBM Aspera Faspex 5 cross-site scripting CWE-79 5.4 Medium2025-04-13
CVE-2023-35907 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium2025-01-29
CVE-2023-37413 IBM Aspera Faspex information disclosure CWE-204 5.3 Medium2025-01-29
CVE-2023-37398 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium2025-01-29
CVE-2023-37412 IBM Aspera Faspex improper access control CWE-250 4.4 Medium2025-01-29
CVE-2023-37395 IBM Aspera Faspex information disclosure CWE-327 2.5 Low2024-12-11
CVE-2024-45097 IBM Aspera Faspex bypass security CWE-650 5.9 Medium2024-09-05
CVE-2024-45096 IBM Aspera Faspex information disclosure CWE-548 6.5 Medium2024-09-05
CVE-2024-45098 IBM Aspera Faspex bypass security CWE-650 6.8 Medium2024-09-05
CVE-2023-37411 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium2024-05-28
CVE-2022-40745 IBM Aspera Faspex information disclosure CWE-326 5.5 Medium2024-04-19
CVE-2023-37397 IBM Aspera Faspex data manipulation CWE-326 3.6 Low2024-04-19
CVE-2023-27279 IBM Aspera Faspex denial of service CWE-799 6.5 Medium2024-04-19
CVE-2023-37396 IBM Aspera Faspex information disclosure CWE-327 2.5 Low2024-04-19
CVE-2023-22869 IBM Aspera Faspex information disclosure CWE-532 5.5 Medium2024-04-19
CVE-2023-37400 IBM Aspera Faspex privilege escalation CWE-522 7.8 High2024-04-19
CVE-2022-22399 IBM Aspera Faspex HTTP header injection CWE-644 5.4 Medium2024-03-05
CVE-2022-40744 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium2024-02-02
CVE-2022-22402 IBM Aspera Faspex cross-site scripting CWE-79 5.4 Medium2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure 5.9 Medium2023-09-08
CVE-2022-22409 IBM Aspera Faspex information disclosure CWE-200 5.3 Medium2023-09-08
CVE-2023-30995 IBM Aspera Faspex improper access control 7.5 High2023-09-08

All 41 known CVE vulnerabilities affecting Aspera Faspex with full Chinese analysis, references, and POCs where available.