Known vulnerabilities in IBM Spectrum Protect Plus - page 12

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79490 - Improper Certificate Validation
CVE-2023-38325		 CWE-295 Medium
No
No
 10.1.15.2 14.08.2023 SB2023081446
SB20230821188
SB20230821192
and 21 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 10.1.15.2 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU78007 - Use After Free
CVE-2023-3390		 CWE-416 Low
Available
No
 10.1.15.2 06.07.2023 SB2023070625
SB2023070629
SB2023072602
and 76 more
#VU77249 - Out-of-bounds write
CVE-2023-2194		 CWE-787 Low
No
No
 10.1.15.2 13.06.2023 SB2023061363
SB2023061420
SB2023061421
and 52 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 10.1.15.2 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 10.1.15.2 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 10.1.15.1 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 10.1.15.1 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU74628 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28466		 CWE-362 Low
No
No
 10.1.15.1 10.04.2023 SB2023041032
SB2023041040
SB2023041041
and 79 more
#VU74122 - Use After Free
CVE-2023-1281		 CWE-416 Low
No
No
 10.1.15.2 28.03.2023 SB2023032818
SB2023032832
SB2023032833
and 85 more
#VU74019 - Improper Initialization
CVE-2022-2196		 CWE-665 Low
No
No
 10.1.15.1 24.03.2023 SB2023032425
SB2023032426
SB2023032806
and 45 more
#VU73768 - Return of pointer value outside of expected range
CVE-2023-22998		 CWE-466 Low
No
No
 10.1.15.1 16.03.2023 SB2023031658
SB2023031664
SB2023031701
and 14 more
#VU71479 - NULL Pointer Dereference
CVE-2022-47929		 CWE-476 Medium
No
No
 10.1.15.1 24.01.2023 SB2023012444
SB2023012450
SB2023012651
and 62 more
#VU71478 - Type confusion
CVE-2023-23454		 CWE-843 Low
No
No
 10.1.15.1 24.01.2023 SB2023012443
SB2023012450
SB2023012626
and 91 more
#VU69756 - Missing release of memory after effective lifetime
CVE-2022-3524		 CWE-401 Medium
No
No
 10.1.15.1 30.11.2022 SB2022113027
SB2022113032
SB2022113033
and 63 more
#VU69297 - Use After Free
CVE-2022-42703		 CWE-416 Low
Available
No
 10.1.15.1 14.11.2022 SB2022111444
SB2022111701
SB2022111702
and 87 more
#VU69296 - Out-of-bounds write
CVE-2022-43750		 CWE-787 Low
No
No
 10.1.15.1 14.11.2022 SB2022111443
SB2022113032
SB2022113033
and 72 more
#VU68314 - Use After Free
CVE-2022-42720		 CWE-416 High
No
No
 10.1.15.1 14.10.2022 SB2022101413
SB2022101707
SB2022101712
and 49 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391		 CWE-93 Medium
No
No
 10.1.15.2 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU51551 - Integer overflow
CVE-2021-3428		 CWE-190 Low
No
No
 10.1.15.2 18.03.2021 SB2021031806
SB2021060427
SB2023040662
and 17 more


Showing elements 221 - 240 out of 397