← Back

CVE-2025-36171

nvd nist
Published: Oct 9, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.2 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.

Affected (1)

Products: Ibm: Aspera Faspex
Ibm
1 product
Aspera Faspex
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Aspera Faspex
From 5.0.0 to 5.0.14
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.