All CVE records

CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability

Known ransomware use CISA KEV listed Added February 21, 2023 Remediate by March 14, 2023

Description

IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

Required action

Apply updates per vendor instructions.

Notes

https://exchange.xforce.ibmcloud.com/vulnerabilities/243512?_ga=2.189195179.1800390251.1676559338-700333034.1676325890; https://nvd.nist.gov/vuln/detail/CVE-2022-47986

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer