Known vulnerabilities in IBM Spectrum Scale - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_scale:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Scale IBM Spectrum Scale is affected by 34 known vulnerabilities: 10 high, 14 medium, 10 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66133 - Improper Authentication
CVE-2022-22411
CWE-287 Low
No
No
5.1.4 05.08.2022 SB2022080531
SB2025032621
#VU64197 - Improper Authentication
CVE-2022-22475
CWE-287 Low
No
No
5.1.2.6, 5.1.4.1 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
5.1.2.6, 5.1.4.1 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Available
No
5.0.5.14, 5.1.2.3, 5.1.3.1 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
- 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
- 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58098 - Improper Access Control
CVE-2016-2124
CWE-284 High
No
No
5.0.5.12, 5.1.3.0 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 34 more
#VU58091 - Improper input validation
CVE-2021-23192
CWE-20 Medium
No
No
5.1.2.2 10.11.2021 SB2021111008
SB2021111201
SB2021112914
and 19 more
#VU52710 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29666
CWE-79 Low
No
No
5.0.5.7, 5.1.0.3, 5.1.1 28.04.2021 SB2021042818
#VU52709 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-29667
CWE-94 Medium
No
No
5.0.5.7, 5.1.0.3, 5.1.1 28.04.2021 SB2021042818
#VU30113 - Improper input validation
CVE-2020-5258
CWE-20 Low
No
No
5.0.5.8, 5.1.1.2 16.07.2020 SB2020071699
SB2021072124
SB2021072134
and 17 more
#VU26556 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-4242
CWE-78 High
No
No
- 03.04.2020 SB2020040304
#VU26555 - Command injection
CVE-2020-4241
CWE-77 High
No
No
- 03.04.2020 SB2020040304
#VU12149 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1654
CWE-200 Low
No
No
- 25.04.2018 SB2018042505
SB2018042506


Showing elements 21 - 40 out of 34