CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability. IBM Aspera
IBM Aspera Faspex Code Execution Vulnerability. IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
- CISA KEV-listed (remediation due 2023-03-14)
- used in ransomware campaigns
- EPSS 94.3% (99.9% percentile)