Known vulnerabilities in IBM Spectrum Protect Plus - page 9

Vendor: IBM Corporation
Software: IBM Spectrum Protect Plus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_protect_plus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 397
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Protect Plus IBM Spectrum Protect Plus is affected by 397 known vulnerabilities: 1 critical, 31 high, 168 medium, 197 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95514 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-42238		 CWE-835 Low
No
No
 10.1.6.4 07.08.2024 SB2024080790
SB2024091077
SB2024091080
and 34 more
#VU95035 - Integer overflow
CVE-2024-42131		 CWE-190 Low
No
No
 10.1.6.4 31.07.2024 SB20240731118
SB2024081301
SB2024082364
and 59 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 10.1.6.4 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU94261 - NULL Pointer Dereference
CVE-2024-39502		 CWE-476 Low
No
No
 10.1.6.4 13.07.2024 SB2024071361
SB2024071626
SB2024071701
and 51 more
#VU94246 - NULL Pointer Dereference
CVE-2024-40959		 CWE-476 Low
No
No
 10.1.6.4 13.07.2024 SB2024071346
SB2024071626
SB2024071701
and 60 more
#VU94233 - Out-of-bounds read
CVE-2024-40901		 CWE-125 Low
No
No
 10.1.6.4 13.07.2024 SB2024071333
SB2024071626
SB2024071701
and 56 more
#VU93762 - Incorrect Calculation
CVE-2024-26645		 CWE-682 Low
No
No
 10.1.6.4 04.07.2024 SB2024070437
SB2024070850
SB2024070851
and 40 more
#VU92074 - NULL Pointer Dereference
CVE-2023-52470		 CWE-476 Low
No
No
 10.1.6.4 13.06.2024 SB2024061379
SB2024061380
SB2024061381
and 45 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 10.1.6.4 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU90807 - Improper Locking
CVE-2021-46939		 CWE-667 Low
No
No
 10.1.6.4 03.06.2024 SB20240603107
SB2024060853
SB2024070825
and 22 more
#VU89235 - Use After Free
CVE-2023-52469		 CWE-416 Low
No
No
 10.1.6.4 08.05.2024 SB2024050814
SB2024050854
SB2024050855
and 50 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 10.1.6.4 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 10.1.6.4 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 10.1.6.4 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 10.1.6.4 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 10.1.6.4 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 10.1.6.4 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 10.1.6.4 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU38060 - Improper input validation
CVE-2015-2156		 CWE-20 Medium
No
No
 10.1.6.4 18.10.2017 SB2017101815
SB2022072128
SB2024052918
and 6 more
#VU41720 - Resource Management Errors
CVE-2014-0193		 CWE-399 Medium
No
No
 10.1.6.4 06.05.2014 SB2014050603
SB2022072128
SB2024090430
and 3 more


Showing elements 161 - 180 out of 397