CVE-2023-27871: IBM Aspera Faspex

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.

Affected products

• IBM Aspera Faspex: up to and including 4.4.2; version 4.4.2 only

Published 2023-03-21. Last modified 2026-06-17.