Known vulnerabilities in IBM Spectrum Protect Backup-Archive Client

Vendor: IBM Corporation
Software: IBM Spectrum Protect Backup-Archive Client
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_backup-archive_client:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 25
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Backup-Archive Client IBM Spectrum Protect Backup-Archive Client is affected by 25 known vulnerabilities: 1 high, 17 medium, 7 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 8.1.25.0 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU84598 - Permissions, Privileges, and Access Controls
CVE-2023-28956		 CWE-264 Low
No
No
 8.1.19.0 20.12.2023 SB2023122016
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 8.1.17.2 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 8.1.17.0 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.1.17.0 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.1.17.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 8.1.17.2 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 8.1.17.2 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 8.1.17.2 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 8.1.17.2 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244		 CWE-200 Medium
No
No
 8.1.17.2 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 8.1.17.2 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 8.1.17.2 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 8.1.17.2 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 8.1.17.0 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 8.1.15.2 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU57967 - Improper input validation
CVE-2021-3807		 CWE-20 Medium
No
No
 8.1.17.2 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 8.1.15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 8.1.15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 8.1.15.2 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 1 - 20 out of 25