SC
Product
Spectrum Copy Data Management
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 8Low 1
Watch
Add Spectrum Copy Data Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-39065 | 9.8 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied… Affected: through 2.2.13 |
| CVE-2021-39052 | 9.8 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization Affected: through 2.2.13 |
| CVE-2022-22479 | 8.8 | Jun 10 | IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 2.2.0.0; 2.2.15.0 |
| CVE-2023-38730 | 7.5 | Aug 27 | IBM Spectrum Copy Data Management information disclosure Affected: 2.2.0.0 through 2.2.19.0 |
| CVE-2022-22354 | 7.5 | Mar 14 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a… Affected: 2.2.0.0 before 2.2.15 |
| CVE-2021-39064 | 7.5 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management… Affected: through 2.2.13 |
| CVE-2021-39058 | 7.5 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: through 2.2.13 |
| CVE-2021-39053 | 7.5 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy… Affected: through 2.2.13 |
| CVE-2021-38947 | 7.5 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: through 2.2.13 |
| CVE-2021-39051 | 6.5 | Mar 14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function Affected: 2.2.0.0 before 2.2.15.0 |
| CVE-2022-22344 | 6.1 | Mar 14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 2.2.0.0 before 2.2.15.0 |
| CVE-2021-3669 | 5.5 | Aug 26 | A flaw was found in the Linux kernel Affected: 2.2.0.0 through 2.2.15.0 |
| CVE-2022-30611 | 5.4 | Jun 10 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: 2.2.0.0; 2.2.15.0 |
| CVE-2021-39055 | 5.4 | Mar 14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting Affected: 2.2.0.0 before 2.2.15.0 |
| CVE-2021-39054 | 5.4 | Dec 13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim Affected: through 2.2.13 |
| CVE-2022-31769 | 5.3 | Jun 10 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in… Affected: 2.2.0.0; 2.2.15.0 |
| CVE-2022-30610 | 4.5 | Jun 10 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management… Affected: 2.2.0.0; 2.2.15.0 |
| CVE-2022-22426 | 3.3 | Jun 10 | IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session… Affected: 2.2.0.0; 2.2.15.0 |
Showing 18