Known vulnerabilities in IBM Spectrum Protect Plus

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111906 - Improper input validation
CVE-2024-8305		 CWE-20 Medium
No
No
 10.1.17.1 25.06.2025 SB2025062502
SB2025062503
#VU111881 - Improper input validation
CVE-2024-3372		 CWE-20 High
No
No
 10.1.17.1 24.06.2025 SB2025062444
SB2025062503
#VU111878 - Improper Access Control
CVE-2024-7553		 CWE-284 Medium
No
No
 10.1.17.1 24.06.2025 SB2025062440
SB2025062503
SB2025100707
#VU111870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-56334		 CWE-78 Medium
No
No
 10.1.17.1 24.06.2025 SB2025062433
SB2025062503
#VU111869 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2024-8207		 CWE-610 Medium
No
No
 10.1.17.1 24.06.2025 SB2025062432
SB2025062503
#VU111863 - Missing Authorization
CVE-2024-6375		 CWE-862 Medium
No
No
 10.1.17.1 24.06.2025 SB2025062423
SB2025062503
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 10.1.17.1 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 10.1.17.1 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU103322 - Out-of-bounds read
CVE-2024-36124		 CWE-125 Medium
No
No
 10.1.17.1 27.01.2025 SB2025012734
SB2025012735
SB2025013120
and 7 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 10.1.17.1 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 10.1.17.1 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 10.1.17.1 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 10.1.17.1 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 10.1.17.1 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 10.1.17.1 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 10.1.17.1 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 10.1.17.1 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU83270 - Improper Certificate Validation
CVE-2023-1409		 CWE-295 Medium
No
No
 10.1.17.1 20.11.2023 SB2023112014
SB2023112015
SB2024022302
and 2 more
#VU72699 - Type confusion
CVE-2023-1077		 CWE-843 Low
No
No
 10.1.17.1 01.03.2023 SB2023030153
SB2023042440
SB2023061704
and 67 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493		 CWE-185 Medium
No
No
 10.1.17.1 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more


Showing elements 1 - 20 out of 397