HTML Injection Vulnerability in IBM Aspera Faspex Application

CVE-2025-36230

What is CVE-2025-36230?

The IBM Aspera Faspex application versions 5.0.0 through 5.0.14.1 are susceptible to an HTML injection vulnerability. This issue allows a remote attacker to inject harmful HTML code into web pages that, when accessed by users, invokes the malicious code within their web browsers. This exploitation occurs under the security context of the hosting site, raising significant risks for affected environments. Users and administrators of IBM Aspera Faspex should prioritize patching and implementing security measures to mitigate this vulnerability.

References