SP
Product
Spectrum Protect
by Ibm · last CVE May 12, 2023
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 5Medium 7Low 0
Watch

Add Spectrum Protect to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-4415
9.8
8%
Apr 23
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking
Affected: 7.1.0.0 through 7.1.10.0; 8.1.0.0 through 8.1.9.200
CVE-2020-4222
9.8
15%
Feb 24
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
Affected: 10.1.0 before 10.1.5; 10.1.5
CVE-2020-4213
9.8
15%
Feb 24
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
Affected: 10.1.0 before 10.1.5; 10.1.5
CVE-2020-4212
9.8
15%
Feb 24
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
Affected: 10.1.0 before 10.1.5; 10.1.5
CVE-2020-4211
9.8
71%
Feb 24
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
Affected: 10.1.0 before 10.1.5; 10.1.5
CVE-2020-4210
9.8
15%
Feb 24
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
Affected: 10.1.0 before 10.1.5; 10.1.5
CVE-2022-22394
8.8
2%
Mar 21
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls
Affected: 8.1.14.100
CVE-2019-4267
7.8
0%
Jul 22
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow
Affected: 7.1.0.0 before 7.1.8.6; 8.1.0.0 before 8.1.8.0
CVE-2020-4559
7.5
1%
Aug 28
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input
Affected: 8.1.0.000 through 8.1.10.000; 7.1.0.000 through 7.1.10.000
CVE-2018-1786
7.5
2%
Nov 12
IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state
Affected: 8.1.0.0 through 8.1.6.0
CVE-2019-4140
7.1
0%
Jul 2
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data
Affected: 7.1.0.0 before 7.1.9.300; 8.1.0.0 before 8.1.8.0
CVE-2022-22484
5.5
0%
May 17
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially…
Affected: 8.1.12.000 before 8.1.14
CVE-2020-5017
5.5
0%
Jan 8
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions
Affected: 10.1.0 before 10.1.7
CVE-2023-27863
4.9
1%
May 12
IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores
Affected: 10.1.13
CVE-2021-20491
4.4
0%
Apr 16
IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands
Affected: 7.1.0.000 before 7.1.13; 8.1.0.000 through 8.1.10.100; 8.1.11.000
CVE-2018-2025
4.4
0%
Nov 25
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable…
Affected: 7.1.0.0 through 7.1.8.5; 8.1.0.0 through 8.1.8.0
CVE-2019-4236
4.4
0%
Jul 22
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if…
Affected: 7.1.0.0 through 7.1.8.5
CVE-2019-4093
4.4
0%
Apr 2
IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that…
Affected: 8.1.7
Showing 18