Skip to content

Known vulnerabilities in IBM Spectrum Protect Plus

Is your version affected?

CVE Summary Score Published
CVE-2020-4565 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to… 5.9 Medium Jun 26, 2020
CVE-2020-4477 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log… 5.3 Medium Jun 15, 2020
CVE-2020-4470 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload… 7.1 High Jun 15, 2020
CVE-2020-4471 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service… 4.8 Medium Jun 15, 2020
CVE-2020-4469 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system 8.1 High Jun 15, 2020
CVE-2020-4216 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic… 7.5 High Jun 15, 2020
CVE-2020-4209 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system 5.4 Medium May 4, 2020
CVE-2020-4242 IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to… 8.8 High Mar 31, 2020
CVE-2020-4241 IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to… 7.5 High Mar 31, 2020
CVE-2020-4240 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system 4.8 Medium Mar 31, 2020
CVE-2020-4214 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused… 7.5 High Mar 31, 2020
CVE-2020-4208 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic… 7.5 High Mar 31, 2020
CVE-2020-4206 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the… 7.5 High Mar 31, 2020
CVE-2020-4222 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system 9.8 Critical Feb 24, 2020
CVE-2020-4213 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system 9.8 Critical Feb 24, 2020
CVE-2020-4212 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system 9.8 Critical Feb 24, 2020
CVE-2020-4211 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system 9.8 Critical Feb 24, 2020
CVE-2020-4210 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system 9.8 Critical Feb 24, 2020
CVE-2019-4703 IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an… 5.3 Medium Feb 24, 2020
CVE-2019-4652 IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in… 5.1 Medium Nov 12, 2019
CVE-2019-4357 When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a… 8.2 High Jul 1, 2019
CVE-2019-4383 When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected… 7.9 High Jul 1, 2019
CVE-2019-4385 IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog 5.9 Medium Jun 19, 2019
CVE-2018-1768 IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test… 5.6 Medium Sep 26, 2018

Other IBM products