CVE-2025-36229

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Dec 26, 2025

CISA due date

—

The record

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enumerating package identifiers.

Affected packages

Ecosystem	Package	Introduced	Fixed