Vulnerabilities > IBM > Spectrum Control > 5.2.11
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-05-09 | CVE-2019-4072 | Insufficient Session Expiration vulnerability in IBM products IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. | 6.3 |
| 2019-05-09 | CVE-2019-4071 | Improper Neutralization of Formula Elements in a CSV File vulnerability in IBM products IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. | 8.8 |
| 2017-02-01 | CVE-2016-8943 | Cross-site Scripting vulnerability in IBM products IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. | 5.4 |
| 2017-02-01 | CVE-2016-8942 | Improper Access Control vulnerability in IBM products IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server. | 3.1 |
| 2017-02-01 | CVE-2016-8941 | Cross-Site Request Forgery (CSRF) vulnerability in IBM products IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. | 8.8 |