IBM Spectrum Copy Data Management
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-38730 | 2.2.0.0 – 2.2.19.0 | IBM Spectrum Copy Data Management information disclosure | HIGH 7.5 | 0.4 % | ||
| CVE-2022-31769 | 2.2.0.0 ; 2.2.15.0 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in | MEDIUM 5.3 | 1.2 % | ||
| CVE-2022-30611 | 2.2.0.0 ; 2.2.15.0 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supp | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-30610 | 2.2.0.0 ; 2.2.15.0 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from wi | MEDIUM 4.5 | 0.6 % | ||
| CVE-2022-22479 | 2.2.0.0 ; 2.2.15.0 | IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execu | HIGH 8.8 | 0.3 % | ||
| CVE-2022-22426 | 2.2.0.0 ; 2.2.15.0 | IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused | LOW 3.3 | 0.2 % | ||
| CVE-2022-22354 | 2.2.0.0 ; 2.2.14.3 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length o | HIGH 7.5 | 0.9 % | ||
| CVE-2022-22344 | 2.2.0.0 ; 2.2.14.3 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-39055 | 2.2.0.0 ; 2.2.14.3 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed a | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-39051 | 2.2.0.0 ; 2.2.14.3 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of applica | MEDIUM 6.5 | 0.9 % | ||
| CVE-2021-39065 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by im | CRITICAL 9.8 | 2.2 % | ||
| CVE-2021-39064 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials | HIGH 7.5 | 1.4 % | ||
| CVE-2021-39058 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decr | HIGH 7.5 | 0.7 % | ||
| CVE-2021-39054 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuadin | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-39053 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper h | HIGH 7.5 | 1.7 % | ||
| CVE-2021-39052 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. | CRITICAL 9.8 | 1.2 % | ||
| CVE-2021-38947 | 2.2.13 | IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decr | HIGH 7.5 | 0.7 % |