SV
Product
Spectrum Virtualize
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 9Low 0
Watch
Add Spectrum Virtualize to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38969 | 9.8 | May 11 | IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials Affected: 8.2.0.0; 8.3.0.0; 8.4.0.0 |
| CVE-2022-43873 | 8.8 | Feb 22 | An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system Affected: 8.2.0.0; 8.3.0.0; 8.4.0.0; 8.5.0.0 |
| CVE-2018-1434 | 8.8 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2021-29873 | 8.1 | Oct 21 | IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability Affected: 7.8.0.0 before 8.4.0.0 |
| CVE-2020-4686 | 8.1 | Aug 17 | IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to Affected: 8.3.1; 8.3.1 |
| CVE-2018-1462 | 7.6 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2018-1438 | 7.5 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2018-1433 | 7.5 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2023-25681 | 6.5 | Mar 5 | LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password Affected: 8.5.0.0 |
| CVE-2022-43870 | 6.5 | Feb 22 | IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files Affected: 8.3.0.0; 8.4.0.0; 8.5.0.0 |
| CVE-2018-1464 | 6.5 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2018-1463 | 6.5 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2023-27870 | 5.9 | May 11 | IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress Affected: 8.5 |
| CVE-2022-39167 | 5.9 | Jan 19 | IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques Affected: 7.8.0.0; 8.2.0.0; 8.3.0.0; 8.4.0.0; 8.5.0.0 |
| CVE-2018-1461 | 5.4 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2018-1466 | 5.3 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
| CVE-2018-1465 | 5.3 | May 17 | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1,… Affected: 6.1.0.0 before 7.5.0.14; 7.7.0.0 before 7.7.1.9; 7.8.0.0 before 7.8.1.6; 8.1.1.0 before 8.1.1.2; 8.1.2.0 before 8.1.2.1 |
Showing 17