← All advisories

Medium severity4.3NVD Advisory· Published Oct 9, 2025· Updated Jun 17, 2026

CVE-2025-36225

CVE-2025-36225

Description

IBM Aspera 5.0.0 through 5.0.13.1

could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

IBM/Asperallm-fuzzy
Range: 5.0.0 - 5.0.13.1
IBM/Aspera Faspex 5cpe-rescue
cpe:2.3:a:ibm:aspera_faspex:5.0.0.0:*:*:*:*:*:*:*
Range: 5.0.0
IBM/Aspera Faspex
cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.0.14

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7247502nvdVendor Advisory

News mentions

0

No linked articles in our index yet.