IBM Spectrum Protect Plus vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20194
3. 202024
4. 202114
5. 20226

Newest CVEs

• CVE-2020-4497

  IBM Spectrum Protect Plus information disclosure

  IBM · Spectrum Protect Plus

  Medium6.8
• CVE-2022-40608

  IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL…

  IBM · Spectrum Protect Plus

  Medium5.9
• CVE-2022-40234

  Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file…

  IBM · Spectrum Protect Plus

  Medium5.9
• CVE-2022-22472

  IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.10.2 for Red Hat OpenShift) could allow…

  IBM · Spectrum Protect Plus

  Medium6.0
• CVE-2022-22396

  Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the…

  IBM · Spectrum Protect Plus

  Medium6.8
• CVE-2022-22354

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection…

  IBM · Spectrum Copy Data Management

  Medium6.2
• CVE-2021-39063

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and…

  IBM · Spectrum Protect Plus

  Medium6.5
• CVE-2021-39057

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send…

  IBM · Spectrum Protect Plus

  Medium4.2
• CVE-2020-4496

  The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle…

  IBM · Spectrum Protect Plus

  Medium6.8
• CVE-2021-20490

  IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID:…

  IBM · Spectrum Protect Plus

  Medium4.0