CVE-2023-37401
published 2025-10-09CVE-2023-37401: IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.
medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | aspera_faspex | >= 5.0.0 < 5.0.14 | 5.0.14 |
| ibm | aspera_faspex | 5.0.0 – 5.0.13.1 | — |