VULNERABILITY INTELLIGENCE

CVE-2025-33136

CVSS score7.1 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Description

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.

Weakness classification

  • CWE-471: Modification of Assumed-Immutable Data (MAID)

Primary references