Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
spectrum protect vulnerabilities and exploits
(subscribe to this query)
4.7
CVSSv3
CVE-2023-33832
IBM Spectrum Protect 8.1.0.0 up to and including 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.
Ibm Spectrum Protect Client
Ibm Spectrum Protect For Space Management
Ibm Spectrum Protect For Virtual Environments
9.8
CVSSv3
CVE-2020-4693
IBM Spectrum Protect Operations Center 7.1.0.000 up to and including 7.1.10 and 8.1.0.000 up to and including 8.1.9 may allow an malicious user to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.
Ibm Spectrum Protect Operations Center
7.1
CVSSv3
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 up to and including 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.
Ibm Spectrum Protect Plus
5.5
CVSSv3
CVE-2021-20546
IBM Spectrum Protect Client 8.1.0.0 up to and including 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934
5.5
CVSSv3
CVE-2021-39048
IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 214438.
Ibm Spectrum Protect Backup-archive Client
Ibm Spectrum Protect For Space Management
9.1
CVSSv3
CVE-2021-39063
IBM Spectrum Protect Plus 10.1.0.0 up to and including 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an malicious user to carry out privileged actions and retrieve sensitive information due to a misconfiguration in access control headers. IBM X-Force ID: 21...
Ibm Spectrum Protect Plus
7.8
CVSSv3
CVE-2016-5985
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.
Ibm Tivoli Storage Manager
Ibm Tivoli Storage Manager 7.1.0.0
Ibm Tivoli Storage Manager 6.4.0.0
Ibm Tivoli Storage Manager 6.3.0.0
9.8
CVSSv3
CVE-2020-4854
IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.
Ibm Spectrum Protect Plus
8.1
CVSSv3
CVE-2021-39057
IBM Spectrum Protect Plus 10.1.0.0 up to and including 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other atta...
Ibm Spectrum Protect Plus
6.5
CVSSv3
CVE-2022-22496
While a user account for the IBM Spectrum Protect Server 8.1.0.000 up to and including 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
Ibm Spectrum Protect Server
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »