Recherche « Ibm aspera faspex »
4 CVE
-
CVE-2026-14996 8.2 Élevée
IBM Aspera Faspex 5 · Ibm aspera faspex
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
-
CVE-2026-14959 7.2 Élevée
IBM Aspera Faspex 5 · Ibm aspera faspex
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.
-
CVE-2026-14958 7.2 Élevée
IBM Aspera Faspex 5 · Ibm aspera faspex
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.
-
IBM Aspera Faspex
IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.