What’s Vulnerable › Products

IBM Aspera Faspex vulnerabilities

49 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your IBM Aspera Faspex version is affected

Exploited IBM Aspera Faspex vulnerabilities

• CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability

Latest IBM Aspera Faspex vulnerabilities

• CVE-2026-14996 — Multiple vulnerabilities in IBM Aspera Faspex (CVSS 8.2)
• CVE-2026-14959 — OS Command Injection in IBM Aspera Faspex (CVSS 7.2)
• CVE-2026-14958 — OS command injection in IBM Aspera Faspex (CVSS 7.2)
• CVE-2025-36227 — Multiple vulnerabilities in IBM Aspera Faspex (CVSS 5.4)
• CVE-2025-36226 — Multiple vulnerabilities in IBM Aspera Faspex (CVSS 5.4)
• CVE-2025-36230 — XSS in IBM Aspera Faspex (CVSS 5.4)
• CVE-2025-36229 — Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex (CVSS 4.3)
• CVE-2025-36228 — Incorrect Execution-Assigned Permissions in IBM Aspera Faspex (CVSS 3.8)
• CVE-2025-36225 — IBM Aspera Faspex information disclosure (CVSS 4.3)
• CVE-2025-36171 — IBM Aspera Faspex denial of service (CVSS 4.9)
• CVE-2023-37401 — IBM Aspera Faspex cross-origin resource sharing (CVSS 5.3)
• CVE-2025-36040 — IBM Aspera Faspex session fixation (CVSS 6.5)
• CVE-2025-36039 — IBM Aspera Faspex bypass security (CVSS 6.5)
• CVE-2025-33138 — IBM Aspera Faspex HTML injection (CVSS 6.1)
• CVE-2025-33137 — IBM Aspera Faspex data modification (CVSS 8.8)
• CVE-2025-33136 — IBM Aspera Faspex data modification (CVSS 8.8)
• CVE-2025-3423 — IBM Aspera Faspex 5 cross-site scripting (CVSS 5.4)
• CVE-2023-37413 — IBM Aspera Faspex information disclosure (CVSS 5.3)
• CVE-2023-37412 — IBM Aspera Faspex improper access control (CVSS 4.9)
• CVE-2023-37398 — IBM Aspera Faspex information disclosure (CVSS 9.8)
• CVE-2023-35907 — IBM Aspera Faspex information disclosure (CVSS 9.8)
• CVE-2023-37395 — IBM Aspera Faspex information disclosure (CVSS 3.3)
• CVE-2024-45098 — IBM Aspera Faspex bypass security (CVSS 8.1)
• CVE-2024-45097 — IBM Aspera Faspex bypass security (CVSS 7.1)
• CVE-2024-45096 — IBM Aspera Faspex information disclosure (CVSS 6.5)