Spectrum Protect Server (Ibm) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2025-06-20. Vendor: Ibm.
CVEs of Spectrum Protect Server
- CVE-2025-3319 - CVSS 9.8 (critical), 2025-06-20: IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access…
- CVE-2022-22496 - CVSS 6.5 (medium), 2022-06-30: While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use…
- CVE-2022-22487 - CVSS 9.8 (critical), 2022-06-30: An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage…
- CVE-2022-22485 - CVSS 9.8 (critical), 2022-06-17: In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's…
- CVE-2022-22394 - CVSS 8.8 (high), 2022-03-21: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls.…
- CVE-2021-20491 - CVSS 4.4 (medium), 2021-04-16: IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By…
- CVE-2020-4591 - CVSS 3.3 (low), 2020-08-28: IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the…
- CVE-2018-1788 - CVSS 4.4 (medium), 2018-11-02: IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873.
