IBM Aspera Faspex
Moderate fix1 remedy
cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 5.0.0, <= 5.0.14.1
IBM Aspera Faspex HTML Injection Vulnerability
Vulnerability
Patched
A HTML injection vulnerability has been identified in IBM Aspera Faspex versions 5.0.0 through 5.0.14.1. This vulnerability allows remote attackers to inject malicious HTML code, which would be executed in the context of the victim's web browser, potentially leading to cross-site scripting attacks.
Impact
Exploitation of this vulnerability could result in cross-site scripting, allowing injected HTML or scripts to be executed in the context of the user's browser session.
Remediation
Users are advised to upgrade to IBM Aspera Faspex version 5.0.14.2, available through the IBM Update Catalog.
Added: Dec 26, 2025, 3:21 PM
Updated: Dec 26, 2025, 3:21 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
1.0exploitability
6.4remediation
7.7relevance
1.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.