| CVE-2020-4497 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in…
|
6.8
Medium
|
Dec 14, 2022 |
| CVE-2022-40608 |
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the…
|
5.9
Medium
|
Sep 19, 2022 |
| CVE-2022-40234 |
Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a…
|
5.9
Medium
|
Sep 19, 2022 |
| CVE-2022-22472 |
IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through…
|
6.0
Medium
|
Jun 30, 2022 |
| CVE-2022-22396 |
Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in…
|
6.8
Medium
|
Jun 6, 2022 |
| CVE-2022-22354 |
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do…
|
6.2
Medium
|
Mar 14, 2022 |
| CVE-2021-39063 |
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an…
|
6.5
Medium
|
Dec 13, 2021 |
| CVE-2021-39057 |
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF)
|
4.2
Medium
|
Dec 13, 2021 |
| CVE-2020-4496 |
The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent…
|
6.8
Medium
|
Dec 13, 2021 |
| CVE-2021-20490 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure…
|
4.0
Medium
|
Jun 29, 2021 |
| CVE-2021-29694 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Apr 26, 2021 |
| CVE-2021-20536 |
IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files…
|
6.2
Medium
|
Apr 26, 2021 |
| CVE-2021-20432 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an…
|
6.5
Medium
|
Apr 26, 2021 |
| CVE-2020-5023 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause…
|
7.5
High
|
Feb 10, 2021 |
| CVE-2020-5022 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which…
|
5.3
Medium
|
Jan 8, 2021 |
| CVE-2020-5021 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a…
|
4.0
Medium
|
Jan 8, 2021 |
| CVE-2020-5020 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the…
|
6.1
Medium
|
Jan 8, 2021 |
| CVE-2020-5019 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of…
|
6.5
Medium
|
Jan 8, 2021 |
| CVE-2020-5018 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of…
|
3.7
Low
|
Jan 8, 2021 |
| CVE-2020-5017 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their…
|
2.9
Low
|
Jan 8, 2021 |
| CVE-2020-4854 |
IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic…
|
9.8
Critical
|
Nov 23, 2020 |
| CVE-2020-4783 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by…
|
5.9
Medium
|
Nov 23, 2020 |
| CVE-2020-4711 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system
|
6.5
Medium
|
Sep 15, 2020 |
| CVE-2020-4703 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload…
|
8.0
High
|
Sep 15, 2020 |
| CVE-2020-4631 |
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned…
|
5.1
Medium
|
Aug 4, 2020 |