CVE-2025-33136CWE-471

IBM Aspera Faspex data modification

High · published May 22, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-471 · Modification of Assumed-Immutable Data (MAID)
Published
2025-05-22T16:14Z
EPSS history
Timeline
  • 22 MAY 16:14Z
    IBM Aspera Faspex data modification
    cvelistv5