IBM Spectrum Protect
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-39048 | 7.1 ; 8.1 | IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker | MEDIUM 6.2 | 0.3 % | ||
| CVE-2020-4559 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM | HIGH 7.5 | 1.3 % | ||
| CVE-2020-4415 | 7.1.0.0 ; 7.1.10.0 ; 8.1.0.0 ; … | IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow | CRITICAL 9.8 | 8.1 % | ||
| CVE-2019-4267 | 7.1 ; 8.1 | The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code | HIGH 7.8 | 0.4 % | ||
| CVE-2019-4236 | 7.l | A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL | MEDIUM 5.1 | 0.3 % | ||
| CVE-2019-4140 | 7.1 ; 8.1 | IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old | HIGH 7.1 | 0.3 % | ||
| CVE-2019-4129 | 7.1 ; 8.1 | IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message | MEDIUM 5.3 | 1.6 % | ||
| CVE-2019-4088 | 7.1 ; 8.1 | IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused b | HIGH 7.8 | 0.5 % | ||
| CVE-2019-4087 | 7.1 ; 8.1 | IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds check | CRITICAL 9.8 | 7.0 % | ||
| CVE-2018-1882 | 7.1 ; 8.1 | In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectru | MEDIUM 4.7 | 0.2 % | ||
| CVE-2018-1853 | 7.1 ; 8.1 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By | MEDIUM 6.1 | 1.2 % | ||
| CVE-2018-1787 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 14887 | MEDIUM 5.5 | 0.3 % | ||
| CVE-2019-4093 | 8.1.7 | IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Clie | MEDIUM 5.1 | 0.3 % | ||
| CVE-2018-1786 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/I | HIGH 7.5 | 2.4 % | ||
| CVE-2018-1788 | 7.1 ; 8.1 | IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force I | MEDIUM 4.4 | 0.4 % | ||
| CVE-2018-1785 | 7.1 ; 8.1 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacke | HIGH 7.5 | 1.1 % | ||
| CVE-2018-1550 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of ser | MEDIUM 6.2 | 0.3 % | ||
| CVE-2018-1545 | 7.1 ; 8.1 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacke | HIGH 7.5 | 1.0 % | ||
| CVE-2018-1447 | 7.1 ; 8.1 | The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the has | HIGH 8.1 | 0.9 % | ||
| CVE-2017-1339 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator ma | MEDIUM 4.4 | 0.2 % | ||
| CVE-2017-1301 | 7.1 ; 8.1 | IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates | MEDIUM 5.5 | 0.4 % | ||
| CVE-2016-8937 | 7.1 ; 8.1 | The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due | CRITICAL 9.8 | 1.9 % | ||
| CVE-2016-8939 | 7.1 ; 8.1 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner | MEDIUM 5.5 | 0.4 % |