Veille CVE

Recherche « Ibm aspera faspex »

4 CVE

  1. CVE-2026-14996 8.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

  2. CVE-2026-14959 7.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

  3. CVE-2026-14958 7.2 Élevée

    IBM Aspera Faspex 5 · Ibm aspera faspex

    IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.

  4. CVE-2022-47986 9.8 Critique Exploitée Rançongiciel

    IBM Aspera Faspex

    IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.