Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

IBM

IBM Spectrum Protect Plus vulnerabilities

49 published CVEs name IBM Spectrum Protect Plus among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2020-4497

    IBM Spectrum Protect Plus information disclosure

    IBM · Spectrum Protect Plus

    Medium6.8
  • CVE-2022-40608

    IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL…

    IBM · Spectrum Protect Plus

    Medium5.9
  • CVE-2022-40234

    Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file…

    IBM · Spectrum Protect Plus

    Medium5.9
  • CVE-2022-22472

    IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.10.2 for Red Hat OpenShift) could allow…

    IBM · Spectrum Protect Plus

    Medium6.0
  • CVE-2022-22396

    Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the…

    IBM · Spectrum Protect Plus

    Medium6.8
  • CVE-2022-22354

    IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection…

    IBM · Spectrum Copy Data Management

    Medium6.2
  • CVE-2021-39063

    IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and…

    IBM · Spectrum Protect Plus

    Medium6.5
  • CVE-2021-39057

    IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send…

    IBM · Spectrum Protect Plus

    Medium4.2
  • CVE-2020-4496

    The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle…

    IBM · Spectrum Protect Plus

    Medium6.8
  • CVE-2021-20490

    IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID:…

    IBM · Spectrum Protect Plus

    Medium4.0
All 49 in the list