Vulnerabilities > IBM > Spectrum Scale > 4.2.3.17

DATE CVE VULNERABILITY TITLE RISK
2019-12-11 CVE-2019-4715 OS Command Injection vulnerability in IBM Spectrum Scale
IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system.
network
low complexity
ibm CWE-78
8.8
8.8
2019-12-11 CVE-2019-4665 Cross-site Scripting vulnerability in IBM Spectrum Scale
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
5.4
2019-10-09 CVE-2019-4558 Injection vulnerability in IBM Spectrum Scale
A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.
local
low complexity
ibm CWE-74
7.8
7.8