Vulnerabilities > IBM > Spectrum Protect Operations Center > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-06-17 CVE-2022-22485 Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Spectrum Protect Operations Center
In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server.
network
low complexity
ibm CWE-307
critical
9.8
2020-09-02 CVE-2020-4693 Improper Input Validation vulnerability in IBM Spectrum Protect Operations Center
IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export.
network
low complexity
ibm CWE-20
critical
9.8
2019-07-02 CVE-2019-4087 Out-of-bounds Write vulnerability in IBM Spectrum Protect Operations Center
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges.
network
low complexity
ibm CWE-787
critical
9.8