Skip to content

Known vulnerabilities in IBM Spectrum Protect

Is your version affected?

CVE Summary Score Published
CVE-2021-39048 IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds… 6.2 Medium Dec 13, 2021
CVE-2020-4559 IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of… 5.9 Medium Aug 28, 2020
CVE-2020-4415 IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds… 9.8 Critical Apr 23, 2020
CVE-2019-4267 The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow 4.9 Medium Jul 22, 2019
CVE-2019-4236 A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping… 5.1 Medium Jul 22, 2019
CVE-2019-4140 IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing… 6.3 Medium Jul 2, 2019
CVE-2019-4129 IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused… 3.1 Low Jul 2, 2019
CVE-2019-4088 IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges… 7.4 High Jul 2, 2019
CVE-2019-4087 IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by… 9.8 Critical Jul 2, 2019
CVE-2018-1882 In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain… 4.7 Medium Apr 8, 2019
CVE-2018-1853 IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking… 6.1 Medium Apr 8, 2019
CVE-2018-1787 IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions 5.1 Medium Apr 8, 2019
CVE-2019-4093 IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM… 5.1 Medium Apr 2, 2019
CVE-2018-1786 IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state 5.3 Medium Nov 12, 2018
CVE-2018-1788 IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged… 4.1 Medium Nov 2, 2018
CVE-2018-1785 IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that… 3.7 Low Sep 26, 2018
CVE-2018-1545 IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that… 5.9 Medium Sep 26, 2018
CVE-2018-1550 IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would… 6.2 Medium Sep 26, 2018
CVE-2018-1447 The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic… 5.1 Medium Apr 4, 2018
CVE-2017-1339 IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password Not rated Oct 5, 2017
CVE-2017-1301 IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack Not rated Oct 5, 2017
CVE-2016-8937 The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a… Not rated Oct 5, 2017
CVE-2016-8939 IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows… Not rated Jun 7, 2017

Other IBM products