SC
Product
Spectrum Control
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 9Low 1
Watch
Add Spectrum Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4071 | 8.8 | May 9 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system,… Affected: 5.2.8 through 5.2.17.2; 5.3.0 through 5.3.1 |
| CVE-2016-8941 | 8.8 | Feb 1 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.11 |
| CVE-2022-38391 | 7.5 | Dec 20 | IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 5.4.0.0 |
| CVE-2016-5946 | 6.5 | Sep 26 | Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary… Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.10.1 |
| CVE-2019-4072 | 6.3 | May 9 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged… Affected: 5.2.8 through 5.2.17.2; 5.3.0 through 5.3.1 |
| CVE-2019-4137 | 6.1 | May 29 | IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting Affected: 5.2.13.0 through 5.2.17.2; 5.3.0.0 through 5.3.2.0 |
| CVE-2019-4138 | 5.9 | May 29 | IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict… Affected: 5.2.13.0 through 5.2.17.2; 5.3.0.0 through 5.3.2.0 |
| CVE-2016-5947 | 5.7 | Sep 26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.10.1 |
| CVE-2016-8943 | 5.4 | Feb 1 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.11 |
| CVE-2016-5944 | 5.4 | Sep 26 | Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users… Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.10.1 |
| CVE-2016-5943 | 5.4 | Sep 26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task… Affected: 5.2.0; 5.2.1; 5.2.1.1; 5.2.2; 5.2.3; 5.2.4; +10 more |
| CVE-2016-5945 | 4.3 | Sep 26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.10.1 |
| CVE-2016-8942 | 3.1 | Feb 1 | IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server Affected: 5.2.8; 5.2.9; 5.2.10; 5.2.11 |
Showing 13