IBM Spectrum Scale
47 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-43843 | 5.1.5.0 – 5.1.5.1 | IBM Spectrum Scale information disclosure | HIGH 7.5 | 0.4 % | ||
| CVE-2023-30434 | 5.1.0.0 – 5.1.2.9 ; 5.1.3.0 – 5.1.6.1 | IBM Storage Scale denial of service | MEDIUM 6.2 | 0.2 % | ||
| CVE-2020-4927 | 5.0.5.0 – < 5.1.6.1 | IBM Spectrum Scale information disclosure | HIGH 8.2 | 0.3 % | ||
| CVE-2022-43869 | 5.1.0.0 – < 5.1.2.8 ; 5.1.3.0 – < 5.1.5.1 | IBM Spectrum Scale denial of service | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-40607 | 5.1 | IBM Spectrum Scale directory traversal | MEDIUM 6.8 | 1.0 % | ||
| CVE-2022-43867 | 5.1.0.1 – < 5.1.4.1 | IBM Spectrum Scale command execution | HIGH 7.8 | 0.3 % | ||
| CVE-2020-4926 | 5.1 | A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or | CRITICAL 9.1 | 0.7 % | ||
| CVE-2022-22368 | 5.1.0 ; 5.1.3.0 | IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly s | HIGH 7.5 | 0.7 % | ||
| CVE-2020-4925 | 5.0 ; 5.1 | A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38882 | 5.1.0 ; 5.1.1.1 | IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-29740 | 5.0.0 ; 5.1.0 ; 5.0.5.6 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerabili | HIGH 8.4 | 0.3 % | ||
| CVE-2021-29708 | 5.1.0.1 | IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow | MEDIUM 6.7 | 0.3 % | ||
| CVE-2020-4850 | 1.1.1.0 ; 1.1.8.4 | IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused b | HIGH 7.5 | 1.0 % | ||
| CVE-2021-29667 | 5.0 ; 5.1 ; 5.1.0.2 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execu | HIGH 7.8 | 1.2 % | ||
| CVE-2021-29666 | 5.0 ; 5.1 ; 5.1.0.2 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to | MEDIUM 5.4 | 0.5 % | ||
| CVE-2020-4981 | 5.0.4.1 ; 5.1.0.3 | IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Fo | MEDIUM 6.0 | 0.2 % | ||
| CVE-2021-29671 | 5.1.0.1 | IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. | MEDIUM 4.0 | 0.3 % | ||
| CVE-2020-4891 | 5.0.0 ; 5.0.5.5 ; 5.1.0 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user | MEDIUM 6.2 | 0.3 % | ||
| CVE-2020-4890 | 5.0.0 ; 5.0.5.5 ; 5.1.0 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a den | MEDIUM 4.4 | 0.3 % | ||
| CVE-2020-4851 | 5.0.0 ; 5.0.5.4 ; 5.1.0 ; … | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support a | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-4889 | 5.0.0 ; 5.0.5.4 ; 5.1 | IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development e | MEDIUM 4.0 | 0.3 % | ||
| CVE-2020-4756 | 4.2.0.0 ; 5.0.0.0 ; 4.2.3.23 ; … | IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 coul | MEDIUM 6.2 | 0.4 % | ||
| CVE-2020-4755 | 5.0.0 ; 5.0.5.2 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip | MEDIUM 5.4 | 0.6 % | ||
| CVE-2020-4749 | 5.0.0 ; 5.0.5.2 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4748 | 5.0.0 ; 5.0.5.2 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-4491 | 4.2.0.0 ; 5.0.0.0 ; 5.0.5 ; … | IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sendi | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-4492 | 4.2.0.0 ; 5.0.0.0 ; 5.0.4.3 ; … | IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashi | MEDIUM 6.2 | 0.3 % | ||
| CVE-2020-4379 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly | HIGH 7.5 | 0.8 % | ||
| CVE-2020-4378 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially cra | MEDIUM 4.9 | 0.9 % | ||
| CVE-2020-4358 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr | MEDIUM 5.4 | 0.6 % | ||
| CVE-2020-4357 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error mes | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4350 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly | HIGH 7.5 | 0.8 % | ||
| CVE-2020-4349 | 5.0.0 ; 5.0.4.4 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly | HIGH 7.5 | 0.8 % | ||
| CVE-2020-4348 | 4.2.0.0 ; 5.0.0.0 ; 4.2.3.21 ; … | IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized action | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-4412 | 4.2.0.0 ; 5.0.0.0 ; 5.0.4.3 ; … | The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vu | MEDIUM 5.3 | 1.3 % | ||
| CVE-2020-4411 | 4.2.0.0 ; 5.0.0.0 ; 5.0.4.3 ; … | The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerabili | HIGH 7.1 | 0.3 % | ||
| CVE-2020-4273 | 5.0 ; 4.2 | IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as r | HIGH 7.8 | 0.4 % | ||
| CVE-2020-4217 | 5.0 ; 4.2 | The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force th | HIGH 7.5 | 1.3 % | ||
| CVE-2019-4715 | 5.0 ; 4.2 | IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a special | HIGH 8.8 | 4.0 % | ||
| CVE-2019-4665 | 5.0 ; 4.2 | IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-4558 | 4.2.0.0 ; 5.0.0.0 ; 4.2.3.17 ; … | A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 t | HIGH 8.1 | 1.2 % | ||
| CVE-2019-4259 | 4.1.1 ; 4.2.0 ; 4.2.1 ; … | A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1993 | 4.1.1 ; 4.2.0 ; 4.2.1 ; … | IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused r | MEDIUM 4.0 | 0.4 % | ||
| CVE-2018-1723 | 5.0.0 ; 5.0.1.2 ; 4.2.0.0 ; … | IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a | MEDIUM 6.2 | 0.4 % | ||
| CVE-2018-1782 | 5.0.1.0 ; 5.0.1.1 | IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by access | MEDIUM 6.5 | 0.3 % | ||
| CVE-2018-1431 | 4.1.1 ; 4.2.0 ; 4.2.1 ; … | A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain contro | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1654 | 4.1.1 ; 4.2.0 ; 4.2.1 ; … | IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data coul | MEDIUM 4.0 | 0.4 % |