CVE-2023-37401 MEDIUM

CVE-2023-37401: IBM Aspera Faspex cross-origin resource sharing

Vendor Ibm

Product Aspera Faspex

Weakness CWE-942

Published October 9, 2025

Last update October 9, 2025

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.

Key dates

October 9, 2025 CVE published

October 9, 2025 Record updated

External resources

Related vulnerabilities