Known vulnerabilities in IBM Spectrum Protect Plus - page 16

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 10.1.15 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU73998 - Insufficiently Protected Credentials
CVE-2023-27863		 CWE-522 Low
No
No
 10.1.14 23.03.2023 SB2023032370
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 10.1.15 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73721 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41722		 CWE-22 Medium
No
No
 10.1.15 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 13 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 10.1.15 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72340 - Improper input validation
CVE-2023-23934		 CWE-20 Low
No
No
 10.1.15 16.02.2023 SB2023021673
SB2023031332
SB2023031613
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 10.1.15 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 10.1.15 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 10.1.15 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68896 - Memory corruption
CVE-2022-3786		 CWE-119 Medium
Available
No
 10.1.14 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 10.1.14 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 10.1.14 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU66807 - Out-of-bounds read
CVE-2022-2873		 CWE-125 Low
No
No
 10.1.15 29.08.2022 SB2022082915
SB2022082923
SB2022090218
and 27 more
#VU66588 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-36557		 CWE-362 Low
No
No
 10.1.15 17.08.2022 SB2022081734
SB2022081739
SB2022081740
and 21 more
#VU66429 - Permissions, Privileges, and Access Controls
CVE-2022-2625		 CWE-264 Low
No
No
 10.1.12.4 12.08.2022 SB2022081212
SB2022081848
SB2022082547
and 40 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 10.1.15 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 10.1.15 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552		 CWE-264 Medium
No
No
 10.1.12.4 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 10.1.15 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 10.1.12.4 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more


Showing elements 301 - 320 out of 397