Known vulnerabilities in Spectrum Protect Server

Vendor: IBM Corporation
Software: Spectrum Protect Server
Software CPE: cpe:2.3:a:ibm_corporation:spectrum_protect_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Spectrum Protect Server Spectrum Protect Server is affected by 16 known vulnerabilities: 9 medium, 7 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72060 - Information Exposure Through Log Files
CVE-2022-43930		 CWE-532 Low
No
No
 8.1.18 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 6 more
#VU72059 - Improper Privilege Management
CVE-2022-43927		 CWE-269 Low
No
No
 8.1.18 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU72058 - Resource exhaustion
CVE-2022-43929		 CWE-400 Low
No
No
 8.1.18 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 8.1.18 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69507 - Improper Privilege Management
CVE-2022-22483		 CWE-269 Low
No
No
 8.1.17 22.11.2022 SB2022112251
SB2023012308
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 8.1.18 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 8.1.17 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU67214 - Improper input validation
CVE-2022-35637		 CWE-20 Medium
No
No
 8.1.17 13.09.2022 SB2022091321
SB2023012308
#VU64834 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-22487		 CWE-307 Medium
No
No
 8.1.15 30.06.2022 SB2022063022
#VU64833 - Security Features
CVE-2022-22496		 CWE-254 Medium
No
No
 8.1.15 30.06.2022 SB2022063022
#VU64499 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-22485		 CWE-307 Medium
No
No
 8.1.14.100 20.06.2022 SB2022062011
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 8.1.17 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61477 - Improper Access Control
CVE-2022-22394		 CWE-284 Medium
No
No
 8.1.14.100 20.03.2022 SB2022032033
#VU15780 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1788		 CWE-200 Low
No
No
 7.1.9.100, 8.1.6 06.11.2018 SB2018110909
#VU8672 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1339		 CWE-200 Low
No
No
 - 04.10.2017 SB2017100208
SB2017120602
#VU6863 - Exposure of sensitive information to an unauthorized actor
CVE-2016-8939		 CWE-200 Low
No
No
 - 02.06.2017 SB2017060206