Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
spectrum scale vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2020-4748
IBM Spectrum Scale 5.0.0 up to and including 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses...
Ibm Spectrum Scale
4.3
CVSSv2
CVE-2020-4749
IBM Spectrum Scale 5.0.0 up to and including 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie wi...
Ibm Spectrum Scale
2.1
CVSSv2
CVE-2020-4851
IBM Spectrum Scale 5.0.0 up to and including 5.0.5.5 and 5.1.0 up to and including 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.
Ibm Spectrum Scale
NA
CVE-2020-4927
A vulnerability in the Spectrum Scale 5.0.5.0 up to and including 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.
Ibm Spectrum Scale
2.1
CVSSv2
CVE-2020-4890
IBM Spectrum Scale 5.0.0 up to and including 5.0.5.5 and 5.1.0 up to and including 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973.
Ibm Spectrum Scale
3.5
CVSSv2
CVE-2019-4665
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
Ibm Spectrum Scale
9
CVSSv2
CVE-2019-4715
IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated malicious user to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093.
Ibm Spectrum Scale
2.1
CVSSv2
CVE-2019-4259
A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be included with service snaps. IBM X-Force ID: 160011.
Ibm Spectrum Scale
3.5
CVSSv2
CVE-2020-4755
IBM Spectrum Scale 5.0.0 up to and including 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses...
Ibm Spectrum Scale
4
CVSSv2
CVE-2020-4348
IBM Spectrum Scale 4.2.0.0 up to and including 4.2.3.21 and 5.0.0.0 up to and including 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414
Ibm Spectrum Scale
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »