CVE-2025-36228

LOW

3.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-26

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, potentially leading to misuse.

Affected Platforms (CPE)

📦

Ibm

Aspera Faspex

>= 5.0.0 and < 5.0.14.2

References & Advisories

🔗 https://www.ibm.com/support/pages/node/7255331

関連する脆弱性情報

CVE-2026-78769.1

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able...

CVE-2025-362305.4

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, wh...

CVE-2025-362293.1

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enume...

CVE-2025-134818.8

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileg...