IBM Aspera Faspex
Moderate fix1 remedy
cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 5.0.0, <= 5.0.13.1
IBM Aspera Faspex Cross-Domain Policy Vulnerability
Vulnerability
Patched
A vulnerability exists in IBM Aspera Faspex versions 5.0.0 to 5.0.13.1, where the application uses a cross-domain policy file that includes untrusted domains. This permissive policy could potentially allow for security risks by enabling interactions with malicious domains.
Impact
This vulnerability could lead to security issues by allowing untrusted domains to be accessed, potentially facilitating cross-domain attacks or data leakage.
Remediation
Users are advised to upgrade to IBM Aspera Faspex version 5.0.14, available through the IBM Update Catalog.
Added: Oct 9, 2025, 2:22 PM
Updated: Oct 9, 2025, 3:59 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
2.5exploitability
7.4remediation
7.7relevance
0.6threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.