CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-02-17
IBM Aspera Faspex YAML Deserialization Remote Code Execution Vulnerability Advisory (CVE-2022-47986)
[Affected Scope] IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier
[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a specially crafted API request
[Mitigation] Immediately upgrade to IBM Aspera Faspex 4.4.2 Patch Level 2 or later, or restrict access to the obsolete API endpoints