coldbraid

CVE-2022-47986 IBM Aspera Faspex

IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

CVSS
not scored

CWE-502

On CISA’s exploited list

IBM Aspera Faspex Code Execution Vulnerability

Added
2023-02-21
Federal patch deadline
2023-03-14
Ransomware use
known