SP
Product
Spectrum Protect
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 5Medium 7Low 0
Watch
Add Spectrum Protect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4415 | 9.8 | Apr 23 | IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking Affected: 7.1.0.0 through 7.1.10.0; 8.1.0.0 through 8.1.9.200 |
| CVE-2020-4222 | 9.8 | Feb 24 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system Affected: 10.1.0 before 10.1.5; 10.1.5 |
| CVE-2020-4213 | 9.8 | Feb 24 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system Affected: 10.1.0 before 10.1.5; 10.1.5 |
| CVE-2020-4212 | 9.8 | Feb 24 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system Affected: 10.1.0 before 10.1.5; 10.1.5 |
| CVE-2020-4211 | 9.8 | Feb 24 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system Affected: 10.1.0 before 10.1.5; 10.1.5 |
| CVE-2020-4210 | 9.8 | Feb 24 | IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system Affected: 10.1.0 before 10.1.5; 10.1.5 |
| CVE-2022-22394 | 8.8 | Mar 21 | The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls Affected: 8.1.14.100 |
| CVE-2019-4267 | 7.8 | Jul 22 | The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow Affected: 7.1.0.0 before 7.1.8.6; 8.1.0.0 before 8.1.8.0 |
| CVE-2020-4559 | 7.5 | Aug 28 | IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input Affected: 8.1.0.000 through 8.1.10.000; 7.1.0.000 through 7.1.10.000 |
| CVE-2018-1786 | 7.5 | Nov 12 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state Affected: 8.1.0.0 through 8.1.6.0 |
| CVE-2019-4140 | 7.1 | Jul 2 | IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data Affected: 7.1.0.0 before 7.1.9.300; 8.1.0.0 before 8.1.8.0 |
| CVE-2022-22484 | 5.5 | May 17 | IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially… Affected: 8.1.12.000 before 8.1.14 |
| CVE-2020-5017 | 5.5 | Jan 8 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions Affected: 10.1.0 before 10.1.7 |
| CVE-2023-27863 | 4.9 | May 12 | IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores Affected: 10.1.13 |
| CVE-2021-20491 | 4.4 | Apr 16 | IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands Affected: 7.1.0.000 before 7.1.13; 8.1.0.000 through 8.1.10.100; 8.1.11.000 |
| CVE-2018-2025 | 4.4 | Nov 25 | IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable… Affected: 7.1.0.0 through 7.1.8.5; 8.1.0.0 through 8.1.8.0 |
| CVE-2019-4236 | 4.4 | Jul 22 | A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if… Affected: 7.1.0.0 through 7.1.8.5 |
| CVE-2019-4093 | 4.4 | Apr 2 | IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that… Affected: 8.1.7 |
Showing 18
