CVE-2025-36226

Publication date

2026-03-10 19:59:35

Family

ibm

State

PUBLISHED

Description

IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.