CPE Details
IBM Aspera Faspex 5.0.10
5.0.10
2024-09-06
23h11 +00:00
23h11 +00:00
2024-09-06
23h11 +00:00
23h11 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:ibm:aspera_faspex:5.0.10:*:*:*:*:*:*:*
Informations
Vendor
ibmProduct
aspera_faspexVersion
5.0.10Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. | 6.1 |
Medium |
||
| IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security. | 8.8 |
High |
||
| IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data. | 8.8 |
High |
||
| IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy. | 5.3 |
Medium |
||
| IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls. | 4.9 |
Medium |
