IBM Aspera Faspex HTML Injection Vulnerability

Vulnerability

A vulnerability allowing HTML injection has been identified in IBM Aspera Faspex versions 5.0.0 to 5.0.12. This issue allows remote attackers to inject malicious HTML code, which could be executed in the context of the victim's Web browser, potentially leading to unauthorized actions or information disclosure.

Impact

Exploitation of this vulnerability could allow for HTML injection, where injected code is executed in the context of the user's browser, potentially leading to cross-site scripting (XSS) attacks or other malicious actions.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.9
impact
1.7
exploitability
5.0
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.