SP
Product
Spectrum Protect Plus
44
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 16Medium 23Low 0
Watch
Add Spectrum Protect Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4242 | 8.8 | Mar 31 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 10.1.0 through 10.1.5 |
| CVE-2020-4241 | 8.8 | Mar 31 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 10.1.0 through 10.1.5 |
| CVE-2020-4206 | 8.8 | Mar 31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper… Affected: 10.1.0 through 10.1.5 |
| CVE-2021-39057 | 8.1 | Dec 13 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF) Affected: 10.1.0 before 10.1.9 |
| CVE-2020-4703 | 8.0 | Sep 15 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the… Affected: 10.1.0 through 10.1.6 |
| CVE-2020-4470 | 8.0 | Jun 15 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the… Affected: 10.1.0 through 10.1.5 |
| CVE-2018-1768 | 7.8 | Sep 26 | IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in… Affected: 10.1.0; 10.1.1 |
| CVE-2023-47148 | 7.5 | Feb 2 | IBM Storage Protect Plus Server information disclosure Affected: 10.1.0 before 10.1.15.3 |
| CVE-2022-40608 | 7.5 | Sep 19 | IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory… Affected: 10.1.6 through 10.1.11 |
| CVE-2022-22396 | 7.5 | Jun 6 | Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases Affected: 10.1.0 before 10.1.10 |
| CVE-2022-22354 | 7.5 | Mar 14 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a… Affected: 10.1.0 before 10.1.9.3 |
| CVE-2021-29694 | 7.5 | Apr 26 | IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.1.0 through 10.1.7 |
| CVE-2020-5023 | 7.5 | Feb 10 | IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption Affected: 10.1.0 through 10.1.7 |
| CVE-2020-5018 | 7.5 | Jan 8 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of such information being caputured by an attacker Affected: 10.1.0 before 10.1.7 |
| CVE-2020-4214 | 7.5 | Mar 31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input Affected: 10.1.0 through 10.1.5 |
| CVE-2019-4652 | 7.1 | Nov 12 | IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive… Affected: 10.1.0 through 10.1.4 |
Showing 16