CVE-2022-47986Used in ransomware
IB
IBM Aspera Faspex
IBM Aspera Faspex Code Execution Vulnerability
What it is
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- exchange.xforce.ibmcloud.com/vulnerabilities/243512?_ga=2.189195179.1800390251.1676559338-
- nvd.nist.gov/vuln/detail/CVE-2022-47986
Description and required action as published by CISA. Full record at NVD.
Other IBM entries on the list
- Aspera Faspex IBM Aspera Faspex Incorrect Authorization Vulnerability CVE-2026-123218 · Nov 9, 2026
- Langflow IBM Langflow Code Injection Vulnerability CVE-2026-9198 · Aug 4, 2026
- InfoSphere BigInsights IBM InfoSphere BigInsights Invalid Input Vulnerability CVE-2013-3993 · May 25, 2022
- WebSphere Application Server and Server Hypervisor Edition IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 · Jan 10, 2022
- Data Risk Manager IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 · Nov 3, 2021
- Data Risk Manager IBM Data Risk Manager Remote Code Execution Vulnerability CVE-2020-4428 · Nov 3, 2021