Known vulnerabilities in IBM Spectrum Protect Plus - page 20

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 10.1.9.3 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 10.1.9.2 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 10.1.9.2 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 10.1.9.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU26578 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-4209		 CWE-22 Medium
No
No
 10.1.5.2199 04.04.2020 SB2020040304
#VU26560 - Exposure of sensitive information to an unauthorized actor
CVE-2019-4703		 CWE-200 Low
No
No
 10.1.5.1 03.04.2020 SB2020030605
#VU26559 - Command injection
CVE-2020-4206		 CWE-77 High
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU26558 - Use of Hard-coded Credentials
CVE-2020-4208		 CWE-798 Medium
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU26557 - Improper input validation
CVE-2020-4214		 CWE-20 High
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU26556 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-4242		 CWE-78 High
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU26555 - Command injection
CVE-2020-4241		 CWE-77 High
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU26554 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-4240		 CWE-22 Medium
No
No
 10.1.5.2199 03.04.2020 SB2020040304
#VU25800 - Command injection
CVE-2020-4213		 CWE-77 High
No
No
 10.1.5.1 06.03.2020 SB2020030605
#VU25799 - Command injection
CVE-2020-4222		 CWE-77 High
No
No
 10.1.5.1 06.03.2020 SB2020030605
#VU25798 - Command injection
CVE-2020-4212		 CWE-77 High
No
No
 10.1.5.1 06.03.2020 SB2020030605
#VU25797 - Command injection
CVE-2020-4211		 CWE-77 High
No
No
 10.1.5.1 06.03.2020 SB2020030605
#VU25796 - Command injection
CVE-2020-4210		 CWE-77 High
No
No
 10.1.5.1 06.03.2020 SB2020030605


Showing elements 381 - 400 out of 397