Known vulnerabilities in IBM Spectrum Protect Plus - page 4

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29804		 CWE-22 Medium
No
No
 10.1.12 21.03.2023 SB2022071516
SB2023011810
SB2023040531
and 11 more
#VU73870 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-30634		 CWE-835 Medium
No
No
 10.1.12 21.03.2023 SB2022071516
SB2023011810
SB2023042120
and 13 more
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580		 CWE-94 Low
No
No
 10.1.12 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 10.1.12 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 10.1.12 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 10.1.12 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65280 - Security Features
CVE-2022-32222		 CWE-254 Medium
No
No
 10.1.12 13.07.2022 SB2022071338
SB2022081105
SB2022100401
and 10 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214		 CWE-444 Medium
No
No
 10.1.12 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65276 - Uncontrolled Search Path Element
CVE-2022-32223		 CWE-427 Low
Available
No
 10.1.12 13.07.2022 SB2022071338
SB2022080910
SB2022081105
and 9 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 10.1.12 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 10.1.12 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 10.1.12 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63914 - Resource exhaustion
CVE-2021-3759		 CWE-400 Low
No
No
 10.1.12 01.06.2022 SB2021110951
SB2022062928
SB2022062931
and 35 more
#VU63839 - Use of Insufficiently Random Values
CVE-2021-20322		 CWE-330 Medium
No
No
 10.1.11 31.05.2022 SB2022060205
SB2022060206
SB2021121495
and 34 more
#VU63386 - Use After Free
CVE-2022-1011		 CWE-416 Low
Available
No
 10.1.11 18.05.2022 SB2022060828
SB2022061213
SB2022061630
and 53 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526		 CWE-264 Low
No
No
 10.1.12 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 65 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 10.1.12 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 10.1.12 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59812 - Permissions, Privileges, and Access Controls
CVE-2021-4155		 CWE-264 Low
No
No
 10.1.11 19.01.2022 SB2022011910
SB2022011932
SB2022011937
and 54 more
#VU55258 - Missing release of memory after effective lifetime
CVE-2020-25704		 CWE-401 Low
No
No
 10.1.11 22.07.2021 SB2020120226
SB2021072251
SB2021072252
and 25 more


Showing elements 61 - 80 out of 397