Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

Aspera Faspex — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in Aspera Faspex, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for Aspera Faspex, categorized under software weakness types such as cross-site scripting and insecure direct object references. It collects vulnerability data spanning from 2019 to 2024, covering all reported issues associated with this specific file transfer platform. By consolidating these records, the resource enables users to track a vendor's advisory history, understand the prevalence and impact of specific weakness classes within this product line, and look up a product's complete vulnerability timeline for compliance and risk assessment purposes. The data includes details on affected versions, attack vectors, and remediation statuses where available, providing a comprehensive view of the security posture of Aspera Faspex over time. This structured approach helps security professionals, developers, and system administrators identify patterns in past incidents, prioritize patching efforts, and evaluate the long-term stability of the software against emerging threats. It serves as a centralized reference point for understanding how past exploits have influenced current security configurations and update policies for this enterprise file sharing solution. The information is derived from official vendor advisories, publicly disclosed CVE records, and verified security research reports, ensuring accuracy and reliability for decision-making processes.

Vendor: IBM

CVE IDTitleCVSSSeverityPublished
CVE-2025-36171 IBM Aspera Faspex denial of service CWE-770 4.9 Medium2025-10-09
CVE-2025-36225 IBM Aspera Faspex information disclosure CWE-203 4.3 Medium2025-10-09
CVE-2023-37401 IBM Aspera Faspex cross-origin resource sharing CWE-942 5.3 Medium2025-10-09
CVE-2025-36040 IBM Aspera Faspex session fixation CWE-613 6.5 Medium2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security CWE-602 6.5 Medium2025-07-30
CVE-2025-33138 IBM Aspera Faspex HTML injection CWE-80 5.4 Medium2025-05-22
CVE-2025-33137 IBM Aspera Faspex data modification CWE-602 7.1 High2025-05-22
CVE-2025-33136 IBM Aspera Faspex data modification CWE-471 7.1 High2025-05-22
CVE-2025-3423 IBM Aspera Faspex 5 cross-site scripting CWE-79 5.4 Medium2025-04-13
CVE-2023-35907 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium2025-01-29
CVE-2023-37413 IBM Aspera Faspex information disclosure CWE-204 5.3 Medium2025-01-29
CVE-2023-37398 IBM Aspera Faspex information disclosure CWE-521 5.9 Medium2025-01-29
CVE-2023-37412 IBM Aspera Faspex improper access control CWE-250 4.4 Medium2025-01-29
CVE-2023-37395 IBM Aspera Faspex information disclosure CWE-327 2.5 Low2024-12-11
CVE-2024-45097 IBM Aspera Faspex bypass security CWE-650 5.9 Medium2024-09-05
CVE-2024-45096 IBM Aspera Faspex information disclosure CWE-548 6.5 Medium2024-09-05
CVE-2024-45098 IBM Aspera Faspex bypass security CWE-650 6.8 Medium2024-09-05
CVE-2023-37411 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium2024-05-28
CVE-2022-40745 IBM Aspera Faspex information disclosure CWE-326 5.5 Medium2024-04-19
CVE-2023-37397 IBM Aspera Faspex data manipulation CWE-326 3.6 Low2024-04-19
CVE-2023-27279 IBM Aspera Faspex denial of service CWE-799 6.5 Medium2024-04-19
CVE-2023-37396 IBM Aspera Faspex information disclosure CWE-327 2.5 Low2024-04-19
CVE-2023-22869 IBM Aspera Faspex information disclosure CWE-532 5.5 Medium2024-04-19
CVE-2023-37400 IBM Aspera Faspex privilege escalation CWE-522 7.8 High2024-04-19
CVE-2022-22399 IBM Aspera Faspex HTTP header injection CWE-644 5.4 Medium2024-03-05
CVE-2022-40744 IBM Aspera Faspex cross-site scripting CWE-79 4.8 Medium2024-02-02
CVE-2022-22402 IBM Aspera Faspex cross-site scripting CWE-79 5.4 Medium2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure 5.9 Medium2023-09-08
CVE-2022-22409 IBM Aspera Faspex information disclosure CWE-200 5.3 Medium2023-09-08
CVE-2023-30995 IBM Aspera Faspex improper access control 7.5 High2023-09-08

All 41 known CVE vulnerabilities affecting Aspera Faspex with full Chinese analysis, references, and POCs where available.