CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability. IBM Aspera
IBM Aspera Faspex Code Execution Vulnerability. IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
- CISA KEV-listed (remediation due 2023-03-14)
- used in ransomware campaigns
- EPSS 100.0% (100.0% percentile)
- CVSS 9.8 critical