Known vulnerabilities in IBM Spectrum Protect Plus - page 5

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355		 CWE-457 Medium
No
No
 10.1.6.4 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU94266 - Improper Locking
CVE-2024-40998		 CWE-667 Low
No
No
 10.1.6.4 13.07.2024 SB2024071366
SB2024081370
SB2024081372
and 45 more
#VU94258 - NULL Pointer Dereference
CVE-2024-39506		 CWE-476 Low
No
No
 10.1.6.4 13.07.2024 SB2024071358
SB2024071626
SB2024071701
and 51 more
#VU94210 - Missing release of memory after effective lifetime
CVE-2024-40997		 CWE-401 Low
No
No
 10.1.6.4 13.07.2024 SB2024071310
SB2024072143
SB2024091080
and 32 more
#VU93190 - Resource Management Errors
CVE-2024-36005		 CWE-399 Low
No
No
 10.1.6.4 24.06.2024 SB20240624107
SB2024070973
SB2024071103
and 42 more
#VU91475 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-26960		 CWE-362 Low
No
No
 10.1.6.4 08.06.2024 SB20240608187
SB2024070474
SB2024070475
and 46 more
#VU91424 - Integer overflow
CVE-2023-52683		 CWE-190 Low
No
No
 10.1.6.4 08.06.2024 SB20240608136
SB2024070838
SB2024070839
and 28 more
#VU91333 - Exposure of sensitive information to an unauthorized actor
CVE-2023-52730		 CWE-200 Low
No
No
 10.1.6.4 08.06.2024 SB2024060849
SB2024062809
SB2024070449
and 23 more
#VU91320 - Resource Management Errors
CVE-2024-26614		 CWE-399 Medium
No
No
 10.1.6.4 08.06.2024 SB2024060836
SB2024060852
SB2024060853
and 63 more
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 10.1.6.4 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU90589 - NULL Pointer Dereference
CVE-2024-26802		 CWE-476 Low
No
No
 10.1.6.4 31.05.2024 SB20240531491
SB2024071122
SB2024071123
and 27 more
#VU90463 - Missing release of memory after effective lifetime
CVE-2024-27011		 CWE-401 Low
No
No
 10.1.6.4 31.05.2024 SB20240531372
SB2024070838
SB2024070839
and 33 more
#VU90419 - NULL Pointer Dereference
CVE-2023-52809		 CWE-476 Low
No
No
 10.1.6.4 31.05.2024 SB20240531328
SB2024062808
SB2024070840
and 29 more
#VU88821 - Out-of-bounds read
CVE-2023-52476		 CWE-125 Low
No
No
 10.1.6.4 18.04.2024 SB2024041854
SB2024050854
SB2024050855
and 39 more
#VU87868 - Allocation of Resources Without Limits or Throttling
CVE-2021-32036		 CWE-770 Low
No
No
 10.1.6.4 27.03.2024 SB2024032734
SB2025010739
#VU79749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-46751		 CWE-611 High
No
No
 10.1.6.4 21.08.2023 SB2023082105
SB2023090730
SB2023101825
and 18 more
#VU77540 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-29361		 CWE-444 High
Available
No
 10.1.12 20.06.2023 SB2023062257
SB2023071977
SB2023111619
and 1 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 10.1.12 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 10.1.12 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 10.1.12 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more


Showing elements 81 - 100 out of 397