CVE-2025-36225CWE-203

CVE-2025-36225

Medium · published October 9, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

IBM Aspera 5.0.0 through 5.0.13.1

could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2025-10-09T18:15Z
Affected products (1)
ProductVersionsFixed in
ibm/aspera_faspex≥ 5.0.0, < 5.0.145.0.14
References (1)
https://www.ibm.com/support/pages/node/7247502 · [email protected]
EPSS history
Timeline
  • 09 OCT 13:56Z
    IBM Aspera Faspex information disclosure
    cvelistv5