CVE-2023-37401

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-10-09

Last modified

2025-10-09

Weaknesses

CWE-942

Affected products

• Aspera Faspex (Ibm)

References

• https://www.ibm.com/support/pages/node/7247502