Vulnerabilities > IBM > Spectrum Protect > High

DATE CVE VULNERABILITY TITLE RISK
2022-03-21 CVE-2022-22394 Unspecified vulnerability in IBM Spectrum Protect 8.1.14.100
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls.
network
low complexity
ibm
8.8
2020-08-28 CVE-2020-4559 Improper Input Validation vulnerability in IBM Spectrum Protect
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input.
network
low complexity
ibm CWE-20
7.5
2019-07-22 CVE-2019-4267 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Spectrum Protect
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow.
local
low complexity
ibm CWE-119
7.8
2019-07-02 CVE-2019-4140 Information Exposure vulnerability in IBM Spectrum Protect
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data.
local
low complexity
ibm CWE-200
7.1
2018-11-12 CVE-2018-1786 Resource Exhaustion vulnerability in IBM products
IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state.
network
low complexity
ibm CWE-400
7.5