CVE-2025-36225

—

CVSS 3.1

4.3 medium

EPSS

<1%p14

Published

Oct 9, 2025 (Oct 9, 2025)

Modified

Jun 17, 2026

Description

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

Vendors: ibm
Products: aspera faspex
Weakness: CWE-203
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.