Vulnerabilities > IBM > Spectrum Control > 5.3.1.0

DATE CVE VULNERABILITY TITLE RISK
2019-05-29 CVE-2019-4138 Insufficiently Protected Credentials vulnerability in IBM Spectrum Control
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-522
5.9
5.9
2019-05-29 CVE-2019-4137 Cross-site Scripting vulnerability in IBM Spectrum Control
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
6.1