PT-2026-24407 · Ibm · Aspera Faspex
CVE-2025-36227
·
Published
2026-03-10
·
Updated
2026-03-10
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Aspera Faspex 5 versions 5.0.0 through 5.0.14.3
Description
The software is susceptible to HTTP header injection due to inadequate validation of input received through the HOST headers. This could enable an attacker to perform various attacks against the system, including cross-site scripting, cache poisoning, or session hijacking. The vulnerable component is the handling of the
HOST header.Recommendations
Update to a version beyond 5.0.14.3.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aspera Faspex